v2.2.3 release commit

Updates docs and release notes for v2.2.3.

Signed-off-by: David Enyeart <enyeart@us.ibm.com>

docs/source/install.rst

@@ -47,12 +47,12 @@ the binaries and images.
 
 .. note:: If you want a specific release, pass a version identifier for Fabric and Fabric-CA docker images.
           The command below demonstrates how to download the latest production releases -
-          **Fabric v2.2.1** and **Fabric CA v1.4.9**
+          **Fabric v2.2.3** and **Fabric CA v1.5.0**
 
 .. code:: bash
 
   curl -sSL https://bit.ly/2ysbOFE | bash -s -- <fabric_version> <fabric-ca_version>
-  curl -sSL https://bit.ly/2ysbOFE | bash -s -- 2.2.2 1.4.9
+  curl -sSL https://bit.ly/2ysbOFE | bash -s -- 2.2.3 1.5.0
 
 .. note:: If you get an error running the above curl command, you may
           have too old a version of curl that does not handle

docs/source/whatsnew.rst

@@ -222,6 +222,7 @@ announced in each of the v2.x releases.
 * `Fabric v2.2.0 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.2.0>`_.
 * `Fabric v2.2.1 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.2.1>`_.
 * `Fabric v2.2.2 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.2.2>`_.
+* `Fabric v2.2.3 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.2.3>`_.
 
 .. Licensed under Creative Commons Attribution 4.0 International License
    https://creativecommons.org/licenses/by/4.0/

release_notes/v2.2.3.md

@@ -1,13 +1,40 @@
-v2.2.3 Release Notes - TBD
-=======================================
+v2.2.3 Release Notes - April 23, 2021
+=====================================
+
+Improvements
+------------
+
+**peer and orderer - Implement legacy name constraints verification for Go 1.15**
+
+These changes reproduce the Go 1.14 name constraint verification in the MSP.
+Without these changes, certificate chains that would fail verification in Go 1.14 would
+successfully validate in Go 1.15 due to the change mentioned in the [Go 1.15 release notes](https://golang.org/doc/go1.15#commonname).
+Specifically, if a signing certificate contains a name constraint, the leaf certificate
+does not include SAN extensions, and the leaf's common name looks like a host name,
+then the additional verification is performed to ensure deterministic behavior relative
+to prior Fabric releases.
+
 
 Fixes
 -----
 
+**FAB-18427: orderer - Report correct reason of stream abort in orderer cluster**
+
+This commit fixes a bug that makes the cluster communication infrastructure
+always report an "aborted" reason after a stream terminates.
+
+**FAB-18304: peer and orderer - Fix leveldb manifest corruption**
+
+This fix updates the version of goleveldb. The prior version of goleveldb had a bug which
+could cause manifest corruption in crash scenarios, especially in disk full crash scenarios.
+With a corrupted goleveldb database, the peer or orderer would fail to start with error
+"panic: Error opening leveldb: leveldb: manifest corrupted".
+
+
 Dependencies
 ------------
 Fabric v2.2.3 has been tested with the following dependencies:
-* Go 1.14.12
+* Go 1.15.7
 * CouchDB v3.1.1
 
 

scripts/bootstrap.sh

@@ -6,9 +6,9 @@
 #
 
 # if version not passed in, default to latest released version
-VERSION=2.2.2
+VERSION=2.2.3
 # if ca version not passed in, default to latest released version
-CA_VERSION=1.4.9
+CA_VERSION=1.5.0
 ARCH=$(echo "$(uname -s|tr '[:upper:]' '[:lower:]'|sed 's/mingw64_nt.*/windows/')-$(uname -m | sed 's/x86_64/amd64/g')")
 MARCH=$(uname -m)
 
@@ -21,8 +21,8 @@ printHelp() {
     echo "-s : bypass fabric-samples repo clone"
     echo "-b : bypass download of platform-specific binaries"
     echo
-    echo "e.g. bootstrap.sh 2.2.2 1.4.9 -s"
-    echo "will download docker images and binaries for Fabric v2.2.2 and Fabric CA v1.4.9"
+    echo "e.g. bootstrap.sh 2.2.3 1.5.0 -s"
+    echo "will download docker images and binaries for Fabric v2.2.3 and Fabric CA v1.5.0"
 }
 
 # dockerPull() pulls docker images from fabric and chaincode repositories