opendev/gerrit
Code Issues Proposed changes

Release notes for 2.5.3

Browse Source 
Change-Id: I419c39f4b5593bdc800a0db71731b2032eb161cc
This commit is contained in:
Shawn Pearce
2013-05-14 18:33:35 -07:00
parent af5d1dc36e
commit 5534ada343
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
ReleaseNotes/ReleaseNotes-2.5.3.txt Normal file
View File

@@ -0,0 +1,22 @@
Release notes for Gerrit 2.5.3
==============================
Gerrit 2.5.3 is now available:
link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.5.3.war[http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.5.3.war]
There are no schema changes from any member of the 2.5.x versions.
However, if upgrading from anything earlier version, follow the upgrade
procedure in the 2.5 link:ReleaseNotes-2.5.html[Release Notes].
Security Fixes
--------------
* Patch vulnerabilities in OpenID client library
+
Installations using OpenID for authentication were vulnerable to a
number of attacks over the network. The openid4java client library
was identified as the entry point. In this release Gerrit updated to
the latest 0.9.8 release, which patches the known attack vectors.
No other changes since 2.5.2.

1
ReleaseNotes/index.txt
View File

@@ -4,6 +4,7 @@ Gerrit Code Review - Release Notes
[[2_5]]
Version 2.5.x
-------------
* link:ReleaseNotes-2.5.3.html[2.5.3]
* link:ReleaseNotes-2.5.2.html[2.5.2]
* link:ReleaseNotes-2.5.1.html[2.5.1]
* link:ReleaseNotes-2.5.html[2.5]