From: Frédéric Buclin <LpSolit@gmail.com>
Date: Fri, 17 Feb 2012 20:12:07 +0000 (+0100)
Subject: Bug 727893: Release notes for Bugzilla 4.0.5
X-Git-Tag: bugzilla-4.0.5~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=24c18ba8da6099daad74e98f9b6f3575d20e0063;p=thirdparty%2Fbugzilla.git

Bug 727893: Release notes for Bugzilla 4.0.5
r=dkl a=LpSolit
---

diff --git a/template/en/default/pages/release-notes.html.tmpl b/template/en/default/pages/release-notes.html.tmpl
index 8b970438f2..4f062e955b 100644
--- a/template/en/default/pages/release-notes.html.tmpl
+++ b/template/en/default/pages/release-notes.html.tmpl
@@ -72,6 +72,22 @@
 
 <h2 id="v40_point">Updates in this 4.0.x Release</h2>
 
+<h3>4.0.5</h3>
+
+<p>This release fixes one security issue. See the
+  <a href="http://www.bugzilla.org/security/4.0.4/">Security Advisory</a>
+  for details.</p>
+
+<p>In addition, the following important change has been made in this release:</p>
+
+<ul>
+  <li>Clickjacking could possibly occur in the attachment "View All" page if a user
+  attached a specially formatted HTML file. To fix this potential problem, the
+  "View All" page now always displays the source code for all attachments whose
+  MIME type is <em>text/html</em>.
+  (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=722161">[% terms.Bug %] 722161</a>)</li>
+</ul>
+
 <h3>4.0.4</h3>
 
 <p>This release fixes two security issues. See the