<h2 id="v40_point">Updates in this 4.0.x Release</h2>
+<h3>4.0.3</h3>
+
+<p>This release fixes two security issues. See the
+ <a href="http://www.bugzilla.org/security/3.4.12/">Security Advisory</a>
+ for details.</p>
+
+<p>In addition, the following important fixes/changes have been made in this
+ release:</p>
+
+<ul>
+ <li>It was impossible to install or upgrade [% terms.Bugzilla %] if <kdb>DBD::Pg</kdb>
+ is installed and your Perl installation has <kdb>version.pm</kdb> 0.92 or newer,
+ due to an incompatible change made in <kdb>version.pm</kdb> 0.92.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=678772">[% terms.Bug %] 678772</a>)</li>
+ <li>When reporting a new [% terms.bug %] using the Guided Form, groups configured
+ to be selected by default were ignored and the [% terms.bug %] was left publicly
+ visible, unless some mandatory groups applied. Now default groups are correctly
+ taken into account, and the [% terms.bug %] will be restricted to these groups.
+ New [% terms.bugs %] reported using the standard form are not affected by this
+ issue.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=460074">[% terms.Bug %] 460074</a>)</li>
+ <li>A new parameter named 'ajax_user_autocompletion' has been added to allow
+ administrators to disable auto-completion when typing characters in user fields.
+ This parameter should only be disabled if your installation is unable to support
+ the load generated by this feature.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=685552">[% terms.Bug %] 685552</a>)</li>
+ <li>Account lockout notifications were not sent to the maintainer of the [% terms.Bugzilla %]
+ installation.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=707594">[% terms.Bug %] 707594</a>)</li>
+ <li>Duplicate [% terms.bug %] detection, simple searches and quicksearches did not
+ work when using Oracle as the database.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=654496">[% terms.Bug %] 654496</a>
+ and <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=582209">[% terms.bug %] 582209</a>)</li>
+ <li>If a product has no components defined, selecting a product in the Advanced Search
+ page was displaying the wrong list of components.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=622487">[% terms.Bug %] 622487</a>)</li>
+ <li>Custom field values whose visibility depends on another field value did not
+ remain selected after editing [% terms.abug %].
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=707428">[% terms.Bug %] 707428</a>)</li>
+ <li><kdb>importxml.pl</kdb> was unable to import [% terms.bugs %] anymore
+ (regressed in 4.0.1).
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=691845">[% terms.Bug %] 691845</a>)</li>
+ <li><kdb>migrate.pl</kdb> was unable to run (regressed in 4.0).
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=682203">[% terms.Bug %] 682203</a>)</li>
+ <li><kdb>whine.pl</kdb> was failing to execute if a saved search threw an error.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=277073">[% terms.Bug %] 277073</a>)</li>
+ <li>Emails sent by <kdb>whine.pl</kdb> had the address of the assignee either
+ truncated or missing completely (regressed in 3.4). The full email address
+ is now properly displayed.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=550299">[% terms.Bug %] 550299</a>)</li>
+</ul>
+
<h3>4.0.2</h3>
<p>This release fixes several security issues. See the
<li>Email notifications about dependencies and flags had the wrong
timestamp.
(<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=643910">[% terms.Bug %] 643910</a>
- and (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=652165">[% terms.Bug %] 652165</a>)</li>
+ and <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=652165">[% terms.bug %] 652165</a>)</li>
<li>You can now select "UTC" as a valid timezone in General Preferences.
(<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=646209">[% terms.Bug %] 646209</a>)</li>
<li>Automatic duplicate detection now works on PostgreSQL (although