gerrit/ReleaseNotes/ReleaseNotes-2.9.3.txt
David Pursehouse 610f597531 Add warning about Bouncy Castle Crypto library update in release notes
Bouncy Castle was upgraded in Ie2b22328 which was first included in
Gerrit version 2.8.5

The new library versions are downloaded during site init, but if the
old library versions are still present in the `lib` folder, it causes
a startup failure (see issue linked below).

The failure can be resolved by removing the old library versions from
the `lib` folder. Add a warning about this in all the release notes
from version 2.9 onwards.

Bug: Issue 3084
Change-Id: Ib6152de9978c57bb7a1d5e147e14ab0ceb464418
2015-02-27 16:42:46 +09:00

58 lines
2.0 KiB
Plaintext

Release notes for Gerrit 2.9.3
==============================
Download:
link:https://gerrit-releases.storage.googleapis.com/gerrit-2.9.3.war[
https://gerrit-releases.storage.googleapis.com/gerrit-2.9.3.war]
Important Notes
---------------
*WARNING:* There are no schema changes from
link:ReleaseNotes-2.9.2.html[2.9.2], but when upgrading from an existing site
that was initialized with Gerrit version 2.6 to version 2.9.1 the primary key
column order will be updated for some tables. It is therefore important to
upgrade the site with the `init` program, rather than only copying the .war file
over the existing one.
It is recommended to run the `init` program in interactive mode. Warnings will
be suppressed in batch mode.
----
java -jar gerrit.war init -d site_path
----
*WARNING:* When upgrading from version 2.8.4 or older with a site that uses
Bouncy Castle Crypto, new versions of the libraries will be downloaded. The old
libraries should be manually removed from site's `lib` folder to prevent the
startup failure described in
link:https://code.google.com/p/gerrit/issues/detail?id=3084[Issue 3084].
Bug Fixes
---------
*Downgrade SSHD to 0.9.0-4-g5967cfd*
In Gerrit version 2.9.2 SSHD was upgraded to 0.13.0 which included a fix for
link:https://issues.apache.org/jira/browse/SSHD-348[SSHD-348 (SSH thread pool
exhaustion)].
It turned out that SSHD 0.13.0 still suffers from this issue, which causes
problems for users of the stream-events in Gerrit 2.9.2.
SSHD 0.9.0 is known to be free from this particular issue, but we cannot
downgrade to that version because it includes some other known issues:
* link:https://issues.apache.org/jira/browse/SSHD-254[SSHD-254 ('authenticated
with partial success' error)]
* link:https://issues.apache.org/jira/browse/SSHD-330[SSHD-330 (sporadic
handshake failures)].
SSHD version 0.9.0-4-g5967cfd is based on 0.9.0 and includes fixes for SSHD-254
and SSHD-330.
Due to the downgrade of SSHD, the following libraries are also downgraded:
* Bouncycastle from 1.51 to 1.49
* Mina Core from 2.0.8 to 2.0.7