blob: e7de0e1d291bc3d9ec89ac90375955356f8bbd3e [file] [log] [blame]
Release notes for Gerrit 2.10.8
===============================
There are no schema changes from link:ReleaseNotes-2.10.7.html[2.10.7].
Download:
link:https://gerrit-releases.storage.googleapis.com/gerrit-2.10.8.war[
https://gerrit-releases.storage.googleapis.com/gerrit-2.10.8.war]
Bug Fixes
---------
* link:https://bugs.chromium.org/p/gerrit/issues/detail?id=10262[Issue 10262]: Fix validation of wants in git-upload-pack for protocol v0 stateless transports.
+
See the following section for details.
* Upgrade JGit to 4.5.5.201812240535-r.
+
This upgrade includes several major versions since 4.0.0 used in Gerrit version 2.10.7.
Important fixes are summarized below. Please refer to the corresponding JGit release notes for full details.
** link:https://projects.eclipse.org/projects/technology.jgit/releases/4.5.5[JGit 4.5.5]: link:https://bugs.chromium.org/p/gerrit/issues/detail?id=10262[Issue 10262]: Fix validation of wants in git-upload-pack for protocol v0 stateless transports.
+
AdvertiseRefsHook was not called for git-upload-pack in protocol v0 stateless transports, meaning that wants were not validated and a user could fetch anything that is pointed to by any ref (using fetch-by-sha1), as long as they could guess the object name.
** link:https://projects.eclipse.org/projects/technology.jgit/releases/4.5.4[JGit 4.5.4]: Fix LockFile semantics when running on NFS.
+
Honor trustFolderStats also when reading packed-refs.
** link:https://projects.eclipse.org/projects/technology.jgit/releases/4.5.3[JGit 4.5.3]: Fix exception handling for opening bitmap index files.
** link:https://projects.eclipse.org/projects/technology.jgit/releases/4.5.2[JGit 4.5.2]: Fix pack marked as corrupted even if it isn’t.
** link:https://projects.eclipse.org/projects/technology.jgit/releases/4.5.1[JGit 4.5.1]: Don’t remove Pack when FileNotFoundException is transient.
** link:https://projects.eclipse.org/projects/technology.jgit/releases/4.1.0[JGit 4.1.0]: Handle stale NFS file handles on packed-refs file.
+
Use java.io.File instead of NIO to check existence of loose objects in ObjectDirectory to speed up inserting of loose objects.
Reduce memory consumption when creating bitmaps during writing pack files.