opendev/gerrit
Code Issues Proposed changes

Merge branch 'stable-2.6' into stable-2.7

Browse Source 
* stable-2.6:
  Release notes for 2.5.3
This commit is contained in:
Shawn Pearce
2013-05-14 18:34:55 -07:00
parent f0cb7cb93c 8ea0c8b12b
commit 62b82de590
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
ReleaseNotes/ReleaseNotes-2.5.3.txt Normal file
View File

@@ -0,0 +1,22 @@
Release notes for Gerrit 2.5.3
==============================
Gerrit 2.5.3 is now available:
link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.5.3.war[http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.5.3.war]
There are no schema changes from any member of the 2.5.x versions.
However, if upgrading from anything earlier version, follow the upgrade
procedure in the 2.5 link:ReleaseNotes-2.5.html[Release Notes].
Security Fixes
--------------
* Patch vulnerabilities in OpenID client library
+
Installations using OpenID for authentication were vulnerable to a
number of attacks over the network. The openid4java client library
was identified as the entry point. In this release Gerrit updated to
the latest 0.9.8 release, which patches the known attack vectors.
No other changes since 2.5.2.

1
ReleaseNotes/index.txt
View File

@@ -9,6 +9,7 @@ Version 2.6.x
[[2_5]] [[2_5]]
Version 2.5.x Version 2.5.x
------------- -------------
* link:ReleaseNotes-2.5.3.html[2.5.3]
* link:ReleaseNotes-2.5.2.html[2.5.2] * link:ReleaseNotes-2.5.2.html[2.5.2]
* link:ReleaseNotes-2.5.1.html[2.5.1] * link:ReleaseNotes-2.5.1.html[2.5.1]
* link:ReleaseNotes-2.5.html[2.5] * link:ReleaseNotes-2.5.html[2.5]