|  | = Release notes for Gerrit 2.9.4 | 
|  |  | 
|  | Download: | 
|  | link:https://www.gerritcodereview.com/download/gerrit-2.9.4.war[ | 
|  | https://www.gerritcodereview.com/download/gerrit-2.9.4.war] | 
|  |  | 
|  | == Important Notes | 
|  |  | 
|  | *WARNING:* There are no schema changes from | 
|  | link:ReleaseNotes-2.9.3.html[2.9.3], but when upgrading from an existing site | 
|  | that was initialized with Gerrit version 2.6 to version 2.9.1 the primary key | 
|  | column order will be updated for some tables. It is therefore important to | 
|  | upgrade the site with the `init` program, rather than only copying the .war file | 
|  | over the existing one. | 
|  |  | 
|  | It is recommended to run the `init` program in interactive mode. Warnings will | 
|  | be suppressed in batch mode. | 
|  |  | 
|  | ---- | 
|  | java -jar gerrit.war init -d site_path | 
|  | ---- | 
|  |  | 
|  | *WARNING:* When upgrading from version 2.8.4 or older with a site that uses | 
|  | Bouncy Castle Crypto, new versions of the libraries will be downloaded. The old | 
|  | libraries should be manually removed from site's `lib` folder to prevent the | 
|  | startup failure described in | 
|  | link:https://code.google.com/p/gerrit/issues/detail?id=3084[Issue 3084]. | 
|  |  | 
|  | == Bug Fixes | 
|  |  | 
|  | * Update JGit to 3.4.2.201412180340-r | 
|  | + | 
|  | This JGit version mitigates | 
|  | link:http://article.gmane.org/gmane.linux.kernel/1853266[CVE-2014-9390]. See the | 
|  | link:https://projects.eclipse.org/projects/technology.jgit/releases/3.4.2[JGit release notes] | 
|  | for further details. |