gerrit/ReleaseNotes/ReleaseNotes-2.3.1.txt
David Pursehouse dd1ef1d114 Sync release notes from master
The release notes on master were updated to use links to the new
download site, but those updates were not reflected on the
stable-2.6 branch.

Also the release note for 2.6.1 is missing on stable-2.6, but
instead the release note for 2.6.2 (which does not exist) is
there.  And there are several older release notes missing.

Sync the release notes from master to make them consistent.

Change-Id: I8facc676aeff754f092a5a9a7bf69345229a55f0
2013-10-15 22:02:10 +09:00

25 lines
1012 B
Plaintext

Release notes for Gerrit 2.3.1
==============================
Gerrit 2.3.1 is now available:
link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.3.1.war[http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.3.1.war]
There are no schema changes from 2.3.
However, if upgrading from anything earlier, follow the upgrade
procedure in the 2.3 link:ReleaseNotes-2.3.html[ReleaseNotes].
Security Fixes
--------------
* Some access control sections may be ignored
+
Gerrit sometimes ignored an access control section in a project
if the exact same section name appeared in All-Projects. The bug
required an unrelated project to have access.inheritFrom set to
All-Projects and be accessed before the project that has the same
section name as All-Projects. This is an unlikely scenario for
most servers, as Gerrit does not normally set inheritFrom equal to
All-Projects. The usual behavior is to not supply this property in
project.config, and permit the implicit inheritance to take place.