Bug 346504: Release Notes For Bugzilla 2.20.3

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, r=LpSolit

diff --git a/docs/rel_notes.txt b/docs/rel_notes.txt
index d8fd4dec57bf11f7436f02fee1cc2123b3b51349..3d34b223b69d509644123289f177ba1a637daf8b 100644 (file)
--- a/docs/rel_notes.txt
+++ b/docs/rel_notes.txt
@@ -7,8 +7,7 @@ Table of Contents
 
 - Introduction
 - Important Updates in this Point Release
-    * Version 2.20.1
-    * Version 2.20.2
+    * Version 2.20.1 - 2.20.3
 - Minimum Requirements
     * Perl
     * For MySQL Users
@@ -156,6 +155,20 @@ Version 2.20.2
 + Email preferences are now set correctly when creating a new user account
   using the ENV method (bug 327355).
 
+Version 2.20.3
+--------------
+
+This release contains minor fixes and security updates. Fixes of note are:
+
++ votes.cgi can correctly confirm a bug, now (bug 351300).
+
++ checksetup.pl correctly reports if your Template::Plugin::GD module
+  is missing, which could lead to charts and graphs not working
+  (bug 345389).
+
+Also see the Security Fixes section for the security updates in this
+release.
+
 
 Minimum Requirements
 ********************
@@ -691,6 +704,25 @@ Security Advisory at:
 
 http://www.bugzilla.org/security/2.18.4/
 
+2.20.2
+------
+
+No security fixes in this release.
+
+2.20.3
+------
+
+The Bugzilla team fixed two Information Leaks and two Cross-Site
+Scripting vulnerabilities that existed in versions of Bugzilla
+prior to 2.20.3. None of them are considered to be of critical
+severity, but we still strongly recommend that you update any
+2.20.x installation to 2.20.3.
+
+To see details on the vulnerabilities that were fixed, see the
+Security Advisory at:
+
+http://www.bugzilla.org/security/2.18.5/
+
 
 Release Notes for Previous Versions
 ***********************************