From: mkanat%bugzilla.org <>
Date: Mon, 25 Sep 2006 03:38:34 +0000 (+0000)
Subject: Bug 346504: Release Notes For Bugzilla 2.20.3
X-Git-Tag: bugzilla-2.20.3~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2c54dcec0e8fd1cc7f87090e8f7d1747c780f7c5;p=thirdparty%2Fbugzilla.git

Bug 346504: Release Notes For Bugzilla 2.20.3
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, r=LpSolit
---

diff --git a/docs/rel_notes.txt b/docs/rel_notes.txt
index d8fd4dec57..3d34b223b6 100644
--- a/docs/rel_notes.txt
+++ b/docs/rel_notes.txt
@@ -7,8 +7,7 @@ Table of Contents
 
 - Introduction
 - Important Updates in this Point Release
-    * Version 2.20.1
-    * Version 2.20.2
+    * Version 2.20.1 - 2.20.3
 - Minimum Requirements
     * Perl
     * For MySQL Users
@@ -156,6 +155,20 @@ Version 2.20.2
 + Email preferences are now set correctly when creating a new user account
   using the ENV method (bug 327355).
 
+Version 2.20.3
+--------------
+
+This release contains minor fixes and security updates. Fixes of note are:
+
++ votes.cgi can correctly confirm a bug, now (bug 351300).
+
++ checksetup.pl correctly reports if your Template::Plugin::GD module
+  is missing, which could lead to charts and graphs not working
+  (bug 345389).
+
+Also see the Security Fixes section for the security updates in this
+release.
+
 
 Minimum Requirements
 ********************
@@ -691,6 +704,25 @@ Security Advisory at:
 
 http://www.bugzilla.org/security/2.18.4/
 
+2.20.2
+------
+
+No security fixes in this release.
+
+2.20.3
+------
+
+The Bugzilla team fixed two Information Leaks and two Cross-Site
+Scripting vulnerabilities that existed in versions of Bugzilla
+prior to 2.20.3. None of them are considered to be of critical
+severity, but we still strongly recommend that you update any
+2.20.x installation to 2.20.3.
+
+To see details on the vulnerabilities that were fixed, see the
+Security Advisory at:
+
+http://www.bugzilla.org/security/2.18.5/
+
 
 Release Notes for Previous Versions
 ***********************************