From d2cacd17384526d2cb5b509ca03681144292f186 Mon Sep 17 00:00:00 2001 From: "Shawn O. Pearce" Date: Thu, 21 Jun 2012 16:28:58 -0700 Subject: Release notes for 2.4.2 Change-Id: I08ec202f3083e0c9f39eba048c608f0f1c152af7 --- ReleaseNotes/ReleaseNotes-2.4.2.txt | 24 ++++++++++++++++++++++++ ReleaseNotes/index.txt | 1 + 2 files changed, 25 insertions(+) create mode 100644 ReleaseNotes/ReleaseNotes-2.4.2.txt diff --git a/ReleaseNotes/ReleaseNotes-2.4.2.txt b/ReleaseNotes/ReleaseNotes-2.4.2.txt new file mode 100644 index 0000000000..afa1d96cb3 --- /dev/null +++ b/ReleaseNotes/ReleaseNotes-2.4.2.txt @@ -0,0 +1,24 @@ +Release notes for Gerrit 2.4.2 +============================== + +Gerrit 2.4.2 is now available: + +link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.4.2.war[http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.4.2.war] + +There are no schema changes from 2.4, or 2.4.1. + +However, if upgrading from anything earlier, follow the upgrade +procedure in the 2.4 link:ReleaseNotes-2.4.html[ReleaseNotes]. + +Security Fixes +-------------- +* Some access control sections may be ignored ++ +Gerrit sometimes ignored an access control section in a project +if the exact same section name appeared in All-Projects. The bug +required an unrelated project to have access.inheritFrom set to +All-Projects and be accessed before the project that has the same +section name as All-Projects. This is an unlikely scenario for +most servers, as Gerrit does not normally set inheritFrom equal to +All-Projects. The usual behavior is to not supply this property in +project.config, and permit the implicit inheritence to take place. diff --git a/ReleaseNotes/index.txt b/ReleaseNotes/index.txt index 07a2be89f1..5f8de28d0d 100644 --- a/ReleaseNotes/index.txt +++ b/ReleaseNotes/index.txt @@ -4,6 +4,7 @@ Gerrit Code Review - Release Notes [[2_4]] Version 2.4.x ------------- +* link:ReleaseNotes-2.4.2.html[2.4.2] * link:ReleaseNotes-2.4.1.html[2.4.1] * link:ReleaseNotes-2.4.html[2.4] -- cgit v1.2.3