Documentation patch for bug 240060: document minimum sendmail version that is required for Bugzilla to work; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
Bug 264227: The MySQL statement for granting permission to the 'bugs' user was being truncated in the PDF version of the 2.16 documentation.
Patch by GavinS <bugzilla@chimpychompy.org>
r=jake
Patch for bug 267560: CheckCanChangeField in process_bug.cgi shouldn't request the bug owner, QA contact and reporter too many times; patch by Frédéric Buclin <LpSolit@netscape.net>, r=justdave, a=justdave.
Patch for bug 267494: 'Voter' column should not appear in email preferences if param(usevotes) is false; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
Patch for bug 177993: Point out that the mid-air collision message is customizable; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=justdave, r=vladd.
Patch for bug 267494 - If param(usevotes) not true, hide 'Voter' column in email preferences; patch by Shane H. W. Travis <travis@sedsystems.ca>, r=vladd, a=justdave.
Documentation patch for bug 257692: link directly to the final URL for the developer's guide; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
Documentation patch for bug 247441: rephrase section 3.9 regarding access control on secure bugs; patch by Shane H. W. Travis <travis@sedsystems.ca>; r=vladd.
[SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.
Patch by Myk Melez <myk@mozilla.org>
r=gerv, a=justdave
Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is
submitted multiple times.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave
Patch for bug 251338: Installation section should mention that you need an MTA installed; patch by Colin S. Ogilvie <colin.ogilvie@gmail.com>; r=vladd, a=justdave.
Patch for bug 263165: Make Bugzilla specify table type as MyISAM when creating tables; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=kiko, a=justdave.
Patch for bug 240079: fix strange phrase in the documentation: "everywhere applicable" should be "where applicable" in README.docs; patch by Niels Reedijk <n.reedijk@planet.nl>; r=timeless; a=justdave.
Bug 117297: Corrects a situation where email addresses got mailed to twice when adding a user to the CC list if the same case isn't used as what's stored in the database for that user.
Patch by Thomas Stromberg <thomas+mozilla@stromberg.org>
r= jouni, a=justdave
Bug 232097: Use an entity reference for the landfill base URL in the demos, to make it easy to change each release. Original
patch by Colin Ogilvie <bmo@colino.co.uk>, backported to the 2.16 docs by me.
Removing the txt and html directories, so the website and tarball builds can auto-build the docs at checkout time (so they don't have to be constantly checked out and rebuilt)
Patch for bug 236567: Update the documentation describing the Perl modules installation on Windows using ppm; patch by Andrei Benea <abenea@home.ro>; r=kiko, a=justdave.
Patch for bug 137121: modify the way in which headers are printed in order to avoid printing them twice when reporting an error in createaccount.cgi; r=jouni, a=justdave.
Branch fix for bug 181106: edit-multiple.html.tmpl uses &apos which
Internet Explorer cannot use. Changed the entity in the template to a
literal apostrophe. r=gerv, a=justdave.
Bug 224815: The check-in for bug 212095 (which fixed a forward-compatibility problem with DBD::mysql) created a backward compatibility issue with DBI (unintentionally bumped the required minimum DBI version). This checkin puts the proper code in place to allow the minimum stated DBI according to the Bugzilla 2.16 documentation as well as the current DBI version as of this writing.
r= myk, bbaetz a= justdave
Applied changed by hand to this file so they'll show up on the website... my docbook environment is busted right now so I
can't compile it the usual way.
Bug 228706: Fixes invalid expiration dates on almost all of the cookies. Amazingly it mostly worked before. It'll work better now. :)
r= myk, a= justdave
Bug 227513: Add text to shadowdb param description to indicate that the privileges to access the shadowdb must be granted from MySQL prior to entering the shadowdb name in the param.
r= myk, a= justdave
Bug 121419: Use the most-specific cookie if more than one exists with different cookiepaths. Should help ease login troubles related to the cookiepath setting.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= bbaetz, a= justdave
Bug 225474: Fixing regression from bug 217422, xml.cgi got busted, and the patch from bug 217422 (MySQL 4 compatibility for show_bug) didn't accomplish what it was supposed to anyway. This checkin fixes both.
r= bbaetz, a= justdave
[SECURITY] Bug 219690: When deleting products and the 'usebuggroups' parameter is on, the privilege which allows someone to add people to the group which is being deleted does not get removed, allowing people with that privilege to get that privilege for the next group that is created which reuses that group ID. Note that this only allows someone who had been granted privileges in the past to retain them.
Patch by Stefan Mayr <S.Mayr2@cadenas.de>
r= justdave, joel a= justdave
[SECURITY] Bug 219044: A user with 'editkeywords' privileges (i.e. usually an administrator) can inject arbitrary SQL via the URL used to edit an existing keyword.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= justdave, zach a= justdave
[SECURITY] Bug 214290: A user with 'editproducts' privileges (i.e. usually an administrator) can select arbitrary SQL to be run by the nightly statistics cron job (collectstats.pl), by giving a product a special name.
Patch by Dave Miller <justdave@bugzilla.org>
r= gerv, bbaetz a= justdave
[SECURITY] Bug 209376: If you know the email address of someone who has voted on a secure bug, you can access the summary of that bug even if you do not have sufficient permissions to view the bug itself.
Patch by Gervase Markham <gerv@mozilla.org>
r= justdave, bbaetz a= justdave
projects / thirdparty / bugzilla.git / log
