Release notes for 2.1.9, 2.4.3, 2.5.5, 2.6.1, 2.7

Change-Id: I80c76a9bb20030922ca9e6a100e282cc4a18b12e

ReleaseNotes/ReleaseNotes-2.1.9.txt

@@ -0,0 +1,16 @@
+Release notes for Gerrit 2.1.9
+==============================
+
+There are no schema changes from link:ReleaseNotes-2.1.8.html[2.1.8].
+
+link:https://gerrit-releases.storage.googleapis.com/gerrit-2.1.9.war[https://gerrit-releases.storage.googleapis.com/gerrit-2.1.9.war]
+
+Bug Fixes
+---------
+* Patch JGit security hole
++
+The security hole may permit a modified Git client to gain access
+to hidden or deleted branches if the user has read permission on
+at least one branch in the repository. Access requires knowing a
+SHA-1 to request, which may be discovered out-of-band from an issue
+tracker or gitweb instance.

ReleaseNotes/ReleaseNotes-2.4.3.txt

@@ -0,0 +1,16 @@
+Release notes for Gerrit 2.4.3
+==============================
+
+There are no schema changes from link:ReleaseNotes-2.4.2.html[2.4.2].
+
+link:https://gerrit-releases.storage.googleapis.com/gerrit-2.4.3.war[https://gerrit-releases.storage.googleapis.com/gerrit-2.4.3.war]
+
+Bug Fixes
+---------
+* Patch JGit security hole
++
+The security hole may permit a modified Git client to gain access
+to hidden or deleted branches if the user has read permission on
+at least one branch in the repository. Access requires knowing a
+SHA-1 to request, which may be discovered out-of-band from an issue
+tracker or gitweb instance.

ReleaseNotes/ReleaseNotes-2.5.5.txt

@@ -0,0 +1,16 @@
+Release notes for Gerrit 2.5.5
+==============================
+
+There are no schema changes from link:ReleaseNotes-2.5.4.html[2.5.4].
+
+link:https://gerrit-releases.storage.googleapis.com/gerrit-2.5.5.war[https://gerrit-releases.storage.googleapis.com/gerrit-2.5.5.war]
+
+Bug Fixes
+---------
+* Patch JGit security hole
++
+The security hole may permit a modified Git client to gain access
+to hidden or deleted branches if the user has read permission on
+at least one branch in the repository. Access requires knowing a
+SHA-1 to request, which may be discovered out-of-band from an issue
+tracker or gitweb instance.

ReleaseNotes/ReleaseNotes-2.6.1.txt

@@ -0,0 +1,16 @@
+Release notes for Gerrit 2.6.1
+==============================
+
+There are no schema changes from link:ReleaseNotes-2.6.html[2.6].
+
+link:https://gerrit-releases.storage.googleapis.com/gerrit-2.6.1.war[https://gerrit-releases.storage.googleapis.com/gerrit-2.6.1.war]
+
+Bug Fixes
+---------
+* Patch JGit security hole
++
+The security hole may permit a modified Git client to gain access
+to hidden or deleted branches if the user has read permission on
+at least one branch in the repository. Access requires knowing a
+SHA-1 to request, which may be discovered out-of-band from an issue
+tracker or gitweb instance.

ReleaseNotes/ReleaseNotes-2.7.txt

@@ -4,8 +4,7 @@ Release notes for Gerrit 2.7
 
 Gerrit 2.7 is now available:
 
-link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.7.war[
-http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.7.war]
+link:https://gerrit-releases.storage.googleapis.com/gerrit-2.7-rc2.war[https://gerrit-releases.storage.googleapis.com/gerrit-2.7-rc2.war]
 
 
 Schema Change

ReleaseNotes/index.txt

@@ -14,11 +14,13 @@ Version 2.7.x
 [[2_6]]
 Version 2.6.x
 -------------
+* link:ReleaseNotes-2.6.1.html[2.6.1]
 * link:ReleaseNotes-2.6.html[2.6]
 
 [[2_5]]
 Version 2.5.x
 -------------
+* link:ReleaseNotes-2.5.5.html[2.5.5]
 * link:ReleaseNotes-2.5.4.html[2.5.4]
 * link:ReleaseNotes-2.5.3.html[2.5.3]
 * link:ReleaseNotes-2.5.2.html[2.5.2]
@@ -28,6 +30,7 @@ Version 2.5.x
 [[2_4]]
 Version 2.4.x
 -------------
+* link:ReleaseNotes-2.4.3.html[2.4.3]
 * link:ReleaseNotes-2.4.2.html[2.4.2]
 * link:ReleaseNotes-2.4.1.html[2.4.1]
 * link:ReleaseNotes-2.4.html[2.4]
@@ -50,6 +53,7 @@ Version 2.2.x
 [[2_1]]
 Version 2.1.x
 -------------
+* link:ReleaseNotes-2.1.9.html[2.1.9]
 * link:ReleaseNotes-2.1.8.html[2.1.8]
 * link:ReleaseNotes-2.1.7.2.html[2.1.7.2]
 * link:ReleaseNotes-2.1.7.html[2.1.7]