opendev/gerrit
Code Issues Proposed changes

Release notes for 2.1.9, 2.4.3, 2.5.5, 2.6.1, 2.7

Browse Source 
Change-Id: I80c76a9bb20030922ca9e6a100e282cc4a18b12e
This commit is contained in:
Shawn Pearce
2013-06-22 18:41:28 -07:00
parent 4d33e1207e
commit 7502a46532
6 changed files with 69 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
ReleaseNotes/ReleaseNotes-2.6.1.txt Normal file
View File

@@ -0,0 +1,16 @@
Release notes for Gerrit 2.6.1
==============================
There are no schema changes from link:ReleaseNotes-2.6.html[2.6].
link:https://gerrit-releases.storage.googleapis.com/gerrit-2.6.1.war[https://gerrit-releases.storage.googleapis.com/gerrit-2.6.1.war]
Bug Fixes
---------
* Patch JGit security hole
+
The security hole may permit a modified Git client to gain access
to hidden or deleted branches if the user has read permission on
at least one branch in the repository. Access requires knowing a
SHA-1 to request, which may be discovered out-of-band from an issue
tracker or gitweb instance.