| Yuxuan 'fishy' Wang | 4f5ad9d | 2016-05-03 16:18:58 -0700 | [diff] [blame] | 1 | = Release notes for Gerrit 2.4.2 |
| Shawn O. Pearce | d2cacd1 | 2012-06-21 16:28:58 -0700 | [diff] [blame] | 2 | |
| 3 | Gerrit 2.4.2 is now available: |
| 4 | |
| Shawn Pearce | 6d7ebc6 | 2015-06-12 16:34:42 -0700 | [diff] [blame] | 5 | link:https://www.gerritcodereview.com/download/gerrit-2.4.2.war[https://www.gerritcodereview.com/download/gerrit-2.4.2.war] |
| Shawn O. Pearce | d2cacd1 | 2012-06-21 16:28:58 -0700 | [diff] [blame] | 6 | |
| 7 | There are no schema changes from 2.4, or 2.4.1. |
| 8 | |
| 9 | However, if upgrading from anything earlier, follow the upgrade |
| 10 | procedure in the 2.4 link:ReleaseNotes-2.4.html[ReleaseNotes]. |
| 11 | |
| Yuxuan 'fishy' Wang | 4f5ad9d | 2016-05-03 16:18:58 -0700 | [diff] [blame] | 12 | == Security Fixes |
| Shawn O. Pearce | d2cacd1 | 2012-06-21 16:28:58 -0700 | [diff] [blame] | 13 | * Some access control sections may be ignored |
| 14 | + |
| 15 | Gerrit sometimes ignored an access control section in a project |
| 16 | if the exact same section name appeared in All-Projects. The bug |
| 17 | required an unrelated project to have access.inheritFrom set to |
| 18 | All-Projects and be accessed before the project that has the same |
| 19 | section name as All-Projects. This is an unlikely scenario for |
| 20 | most servers, as Gerrit does not normally set inheritFrom equal to |
| 21 | All-Projects. The usual behavior is to not supply this property in |
| David Pursehouse | 4d7ac77 | 2013-06-25 17:14:30 +0900 | [diff] [blame] | 22 | project.config, and permit the implicit inheritance to take place. |
