Bug 297928: detaint_natural and trick_taint shouldn't rely on $1 - Original patch by Christian Reis <kiko@async.com.br> (backported by LpSolit) r/a = justdave
mkanat%kerio.com [Thu, 19 May 2005 10:54:42 +0000 (10:54 +0000)]
Part of Bug 294734: Emergency 2.16.10 Release -- This is the version updates.
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=justdave
Bug 294655: It is not possible to enter a bug on many installations of Bugzilla 2.16.9 (regression due to bug 287109) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
mkanat%kerio.com [Thu, 12 May 2005 09:10:14 +0000 (09:10 +0000)]
Bug 287109: [SECURITY] Names of private products/components can be exposed on certain CGIs
Patch By Frederic Buclin <LpSolit@gmail.com> r=myk, a=justdave
mkanat%kerio.com [Fri, 18 Mar 2005 12:20:02 +0000 (12:20 +0000)]
Bug 256513: Fix usage of grep (/$value/, @array); (importxml.pl only, for 2.16)
Patch By Olav Vitters <bugzilla-mozilla@bkor.dhs.org> (Backport by mkanat) r=justdave, a=justdave
Bug 274173 : The Params that are listed in section 3.1 (parameters) should use a <varlist/>
Patch by Shane H. W. Travis <travis@sedsystems.ca> r=colin.ogilvie
Bug 275943 : 2.16 docs imply that it's necessary to run checksetup.pl as the webserver user
Patch by Shane H. W. Travis <travis@sedsystems.ca> r=colin.ogilvie
Bug 276907: Don't linkify javascript: or data: URLs in the URL field on a bug.
Patch by Gervase Markham <gerv@mozilla.org>, backported to 2.16 branch by Myk Melez <myk@mozilla.org>
r= justdave,vladd, a= justdave
Bug 247923 - The docs now specify the difference in syntax for MySQL 3/4 regarding the max_allowed_packet option.
Patch by Shane H. W. Travis <travis@sedsystems.ca>
r=jake
Bug 183216 - Updated dbschema image for the 2.16 docs. This image was done using Corel Draw (dbschema.cdr)
Image by: Shane H. W. Travis <travis@sedsystems.ca>
r=jake
Bug 253720 - The docs now specify that it is required to run ./checksetup.pl aft
er adding a template to the custom directory.
Patch by Shane H. W. Travis <travis@sedsystems.ca>
r=jake
Bug 256019 - The documentation was unclear regarding what to do if the administrator gets logged out while "shutdownhtml" is active.
Patch by Shane H. W. Travis <travis@sedsystems.ca>
r=jake
Patch for bug 270263: 'Votes' should not be a column choice if param(usevotes) is not true; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=jouni, a=justdave.
Patch for bug 271306: specify that defaultquery is used by default to submit queries, not bugs; patch by Frédéric Buclin <LpSolit@netscape.net>, r=vladd, r=justdave, a=justdave.
Documentation patch for bug 240060: document minimum sendmail version that is required for Bugzilla to work; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
Bug 264227: The MySQL statement for granting permission to the 'bugs' user was being truncated in the PDF version of the 2.16 documentation.
Patch by GavinS <bugzilla@chimpychompy.org>
r=jake
Patch for bug 267560: CheckCanChangeField in process_bug.cgi shouldn't request the bug owner, QA contact and reporter too many times; patch by Frédéric Buclin <LpSolit@netscape.net>, r=justdave, a=justdave.
Patch for bug 267494: 'Voter' column should not appear in email preferences if param(usevotes) is false; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
Patch for bug 177993: Point out that the mid-air collision message is customizable; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=justdave, r=vladd.
Patch for bug 267494 - If param(usevotes) not true, hide 'Voter' column in email preferences; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
Documentation patch for bug 257692: link directly to the final URL for the developer's guide; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
Documentation patch for bug 247441: rephrase section 3.9 regarding access control on secure bugs; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
[SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.
Patch by Myk Melez <myk@mozilla.org>
r=gerv, a=justdave
Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is
submitted multiple times.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave
Patch for bug 251338: Installation section should mention that you need an MTA installed; patch by Colin S. Ogilvie <colin.ogilvie@gmail.com>; r=vladd, a=justdave.
Patch for bug 263165: Make Bugzilla specify table type as MyISAM when creating tables; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=kiko, a=justdave.
Patch for bug 240079: fix strange phrase in the documentation: "everywhere applicable" should be "where applicable" in README.docs; patch by Niels Reedijk <n.reedijk@planet.nl>; r=timeless; a=justdave.
Bug 117297: Corrects a situation where email addresses got mailed to twice when adding a user to the CC list if the same case isn't used as what's stored in the database for that user.
Patch by Thomas Stromberg <thomas+mozilla@stromberg.org>
r= jouni, a=justdave
Bug 232097: Use an entity reference for the landfill base URL in the demos, to make it easy to change each release. Original
patch by Colin Ogilvie <bmo@colino.co.uk>, backported to the 2.16 docs by me.
Removing the txt and html directories, so the website and tarball builds can auto-build the docs at checkout time (so they don't have to be constantly checked out and rebuilt)
Patch for bug 236567: Update the documentation describing the Perl modules installation on Windows using ppm; patch by Andrei Benea <abenea@home.ro>; r=kiko, a=justdave.
projects / thirdparty / bugzilla.git / log
