opendev/gerrit
Code Issues Proposed changes

Merge branch 'stable-2.7'

Browse Source 
* stable-2.7:
  Release notes for 2.5.3
This commit is contained in:
Shawn Pearce
2013-05-14 18:35:20 -07:00
parent 7f3c1e69e0 62b82de590
commit c67fbf4228
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
ReleaseNotes/ReleaseNotes-2.5.3.txt Normal file
View File

@@ -0,0 +1,22 @@
Release notes for Gerrit 2.5.3
==============================
Gerrit 2.5.3 is now available:
link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.5.3.war[http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.5.3.war]
There are no schema changes from any member of the 2.5.x versions.
However, if upgrading from anything earlier version, follow the upgrade
procedure in the 2.5 link:ReleaseNotes-2.5.html[Release Notes].
Security Fixes
--------------
* Patch vulnerabilities in OpenID client library
+
Installations using OpenID for authentication were vulnerable to a
number of attacks over the network. The openid4java client library
was identified as the entry point. In this release Gerrit updated to
the latest 0.9.8 release, which patches the known attack vectors.
No other changes since 2.5.2.

1
ReleaseNotes/index.txt
View File

@@ -9,6 +9,7 @@ Version 2.6.x
[[2_5]]
Version 2.5.x
-------------
* link:ReleaseNotes-2.5.3.html[2.5.3]
* link:ReleaseNotes-2.5.2.html[2.5.2]
* link:ReleaseNotes-2.5.1.html[2.5.1]
* link:ReleaseNotes-2.5.html[2.5]