summaryrefslogtreecommitdiffstats
path: root/ReleaseNotes/ReleaseNotes-2.3.1.txt
blob: 324a3c1446408b6bc04b136f8fd59c43f4a19cbc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
Release notes for Gerrit 2.3.1
==============================

Gerrit 2.3.1 is now available:

link:http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.3.1.war[http://code.google.com/p/gerrit/downloads/detail?name=gerrit-2.3.1.war]

There are no schema changes from 2.3.

However, if upgrading from anything earlier, follow the upgrade
procedure in the 2.3 link:ReleaseNotes-2.3.html[ReleaseNotes].

Security Fixes
--------------
* Some access control sections may be ignored
+
Gerrit sometimes ignored an access control section in a project
if the exact same section name appeared in All-Projects. The bug
required an unrelated project to have access.inheritFrom set to
All-Projects and be accessed before the project that has the same
section name as All-Projects. This is an unlikely scenario for
most servers, as Gerrit does not normally set inheritFrom equal to
All-Projects. The usual behavior is to not supply this property in
project.config, and permit the implicit inheritence to take place.