gerrit/ReleaseNotes/ReleaseNotes-2.9.4.txt
David Pursehouse 610f597531 Add warning about Bouncy Castle Crypto library update in release notes
Bouncy Castle was upgraded in Ie2b22328 which was first included in
Gerrit version 2.8.5

The new library versions are downloaded during site init, but if the
old library versions are still present in the `lib` folder, it causes
a startup failure (see issue linked below).

The failure can be resolved by removing the old library versions from
the `lib` folder. Add a warning about this in all the release notes
from version 2.9 onwards.

Bug: Issue 3084
Change-Id: Ib6152de9978c57bb7a1d5e147e14ab0ceb464418
2015-02-27 16:42:46 +09:00

40 lines
1.4 KiB
Plaintext

Release notes for Gerrit 2.9.4
==============================
Download:
link:https://gerrit-releases.storage.googleapis.com/gerrit-2.9.4.war[
https://gerrit-releases.storage.googleapis.com/gerrit-2.9.4.war]
Important Notes
---------------
*WARNING:* There are no schema changes from
link:ReleaseNotes-2.9.3.html[2.9.3], but when upgrading from an existing site
that was initialized with Gerrit version 2.6 to version 2.9.1 the primary key
column order will be updated for some tables. It is therefore important to
upgrade the site with the `init` program, rather than only copying the .war file
over the existing one.
It is recommended to run the `init` program in interactive mode. Warnings will
be suppressed in batch mode.
----
java -jar gerrit.war init -d site_path
----
*WARNING:* When upgrading from version 2.8.4 or older with a site that uses
Bouncy Castle Crypto, new versions of the libraries will be downloaded. The old
libraries should be manually removed from site's `lib` folder to prevent the
startup failure described in
link:https://code.google.com/p/gerrit/issues/detail?id=3084[Issue 3084].
Bug Fixes
---------
* Update JGit to 3.4.2.201412180340-r
+
This JGit version mitigates
link:http://article.gmane.org/gmane.linux.kernel/1853266[CVE-2014-9390]. See the
link:https://projects.eclipse.org/projects/technology.jgit/releases/3.4.2[JGit release notes]
for further details.