summaryrefslogtreecommitdiffstats
path: root/ReleaseNotes/ReleaseNotes-2.1.9.txt
blob: 63bcb20ea448fb72d53496c443915d8bcb53e1f9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
= Release notes for Gerrit 2.1.9

There are no schema changes from link:ReleaseNotes-2.1.8.html[2.1.8].

link:https://www.gerritcodereview.com/download/gerrit-2.1.9.war[https://www.gerritcodereview.com/download/gerrit-2.1.9.war]

== Bug Fixes
* Patch JGit security hole
+
The security hole may permit a modified Git client to gain access
to hidden or deleted branches if the user has read permission on
at least one branch in the repository. Access requires knowing a
SHA-1 to request, which may be discovered out-of-band from an issue
tracker or gitweb instance.