Bug 720752 - Release notes for Bugzilla 4.0.4

r/a=LpSolit

diff --git a/template/en/default/pages/release-notes.html.tmpl b/template/en/default/pages/release-notes.html.tmpl
index dda9ca5b62c5d894f13e10d3ec24df095bae07c6..8b970438f220277b4bc05b93ae5ede9d52307297 100644 (file)
--- a/template/en/default/pages/release-notes.html.tmpl
+++ b/template/en/default/pages/release-notes.html.tmpl
@@ -72,6 +72,31 @@
 
 <h2 id="v40_point">Updates in this 4.0.x Release</h2>
 
+<h3>4.0.4</h3>
+
+<p>This release fixes two security issues. See the
+  <a href="http://www.bugzilla.org/security/3.4.13/">Security Advisory</a>
+  for details.</p>
+
+<p>In addition, the following important fixes/changes have been made in this
+  release:</p>
+
+<ul>
+  <li>Clickjacking could possibly occur in the attachment Details page if a user attached
+  a specially formatted HTML file. To fix this potential problem,  the Details page now always 
+  displays the source code for all attachments whose MIME type is text/html,  and users
+  can see the rendered page by clicking on View.
+  (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=716283">[% terms.Bug %] 716283</a>)</li>
+  <li>Previously, WebServices would only work with <kbd>JSON::RPC</kbd> 0.96 or 
+  older due to newer versions being incompatible. <kbd>JSON::RPC</kbd> 1.x is now 
+  supported as well.
+  (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=706753">[% terms.Bug %] 706753</a>)</li>
+  <li>User autocompletion for the requestee and requester fields in request.cgi and
+  the watch users field in userprefs.cgi were not working properly.
+  (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=715705">[% terms.Bug %] 715705</a>)
+  (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=715650">[% terms.Bug %] 715650</a>)</li>
+</ul>
+
 <h3>4.0.3</h3>
 
 <p>This release fixes two security issues. See the
@@ -82,9 +107,9 @@
   release:</p>
 
 <ul>
-  <li>It was impossible to install or upgrade [% terms.Bugzilla %] if <kdb>DBD::Pg</kdb>
-    is installed and your Perl installation has <kdb>version.pm</kdb> 0.92 or newer,
-    due to an incompatible change made in <kdb>version.pm</kdb> 0.92.
+  <li>It was impossible to install or upgrade [% terms.Bugzilla %] if <kbd>DBD::Pg</kbd>
+    is installed and your Perl installation has <kbd>version.pm</kbd> 0.92 or newer,
+    due to an incompatible change made in <kbd>version.pm</kbd> 0.92.
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=678772">[% terms.Bug %] 678772</a>)</li>
   <li>When reporting a new [% terms.bug %] using the Guided Form, groups configured
     to be selected by default were ignored and the [% terms.bug %] was left publicly
@@ -111,14 +136,14 @@
   <li>Custom field values whose visibility depends on another field value did not
     remain selected after editing [% terms.abug %].
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=707428">[% terms.Bug %] 707428</a>)</li>
-  <li><kdb>importxml.pl</kdb> was unable to import [% terms.bugs %] anymore
+  <li><kbd>importxml.pl</kbd> was unable to import [% terms.bugs %] anymore
     (regressed in 4.0.1).
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=691845">[% terms.Bug %] 691845</a>)</li>
-  <li><kdb>migrate.pl</kdb> was unable to run (regressed in 4.0).
+  <li><kbd>migrate.pl</kbd> was unable to run (regressed in 4.0).
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=682203">[% terms.Bug %] 682203</a>)</li>
-  <li><kdb>whine.pl</kdb> was failing to execute if a saved search threw an error.
+  <li><kbd>whine.pl</kbd> was failing to execute if a saved search threw an error.
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=277073">[% terms.Bug %] 277073</a>)</li>
-  <li>Emails sent by <kdb>whine.pl</kdb> had the address of the assignee either
+  <li>Emails sent by <kbd>whine.pl</kbd> had the address of the assignee either
     truncated or missing completely (regressed in 3.4). The full email address
     is now properly displayed.
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=550299">[% terms.Bug %] 550299</a>)</li>
@@ -134,7 +159,7 @@
   release:</p>
 
 <ul>
-  <li>The <kdb>B[% %]ug.create</kdb> WebService method now throws an error if you
+  <li>The <kbd>B[% %]ug.create</kbd> WebService method now throws an error if you
     pass a group name which doesn't exist. In [% terms.Bugzilla %] 4.0 and 4.0.1,
     this group name was silently ignored, leaving your [% terms.bug %] unsecure
     if no other group applied.
@@ -145,7 +170,7 @@
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=663208">[% terms.Bug %] 663208</a>)</li>
   <li>Marking [% terms.abug %] as a duplicate now works in Internet Explorer 9.
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=656769">[% terms.Bug %] 656769</a>)</li>
-  <li><kdb>importxml.pl</kdb> no longer crashes when importing keywords (regressed
+  <li><kbd>importxml.pl</kbd> no longer crashes when importing keywords (regressed
     in 4.0).
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=657707">[% terms.Bug %] 657707</a>)</li>
   <li>Data entered while reporting a new [% terms.bug %] could be lost if you had
@@ -158,7 +183,7 @@
   <li>The XML-RPC interface now works with SOAP::Lite 0.711 and 0.712 under mod_perl.
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=600810">[% terms.Bug %] 600810</a>)</li>
   <li>LWP 6.00 and newer require Perl 5.8.8 and above. When installing this module
-    using <kdb>install-module.pl</kdb> on a Perl installation older than 5.8.8,
+    using <kbd>install-module.pl</kbd> on a Perl installation older than 5.8.8,
     LWP 5.837 will be installed instead.
     (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=655912">[% terms.Bug %] 655912</a>)</li>
   <li>Viewing [% terms.abug %] report should be significantly faster when your