]>
git.ipfire.org Git - thirdparty/bugzilla.git/log
Dave Miller [Tue, 24 Sep 2024 04:09:33 +0000 (00:09 -0400)]
Bug
1920621 followup: fix typo
Dave Miller [Tue, 24 Sep 2024 03:37:42 +0000 (23:37 -0400)]
Bug
1920621 : Build the offline formats (pdf/epub/htmlzip) on ReadTheDocs (#201)
Dave Miller [Fri, 6 Sep 2024 07:20:02 +0000 (03:20 -0400)]
bump version to 5.0.4.1+ post-release
Dave Miller [Tue, 3 Sep 2024 15:46:54 +0000 (11:46 -0400)]
bump version to 5.0.4.1 for release
Dave Miller [Thu, 29 Aug 2024 11:04:15 +0000 (07:04 -0400)]
Bug
1880288 : Noncharacters in comments cause bugmail sending to fail
Co-authored-by: Frédéric Buclin <LpSolit@gmail.com>
Dave Miller [Thu, 29 Aug 2024 11:03:41 +0000 (07:03 -0400)]
Bug
1439260 : XSS in chart.cgi and report.cgi
Dave Miller [Thu, 29 Aug 2024 11:03:14 +0000 (07:03 -0400)]
Bug
1813629 : Prevent Auth plugins from authenticating usernames with unicode variants
Co-authored-by: David Lawrence <dkl@mozilla.com>
Dave Miller [Tue, 3 Sep 2024 15:39:02 +0000 (11:39 -0400)]
[no bug] fix documentation errors
Dave Miller [Tue, 3 Sep 2024 11:25:15 +0000 (07:25 -0400)]
Bug
1786956 : Release notes for Bugzilla 5.0.4.1 (#180)
Dave Miller [Mon, 26 Aug 2024 01:24:08 +0000 (21:24 -0400)]
[5.0.4] Bug
1852154 : Warn admin if end-of-support date is approaching (#191)
a=dylan
Dave Miller [Tue, 14 May 2024 06:03:46 +0000 (02:03 -0400)]
Bug
1588175 - Undefined subroutine utf8::SWASHNEW called at Bugzilla/Util.pm line 109. (#182)
Co-authored-by: Dylan Hardison <dylan@hardison.net>
Dave Miller [Sat, 11 May 2024 18:11:45 +0000 (14:11 -0400)]
Bug
1851352 : Email::Address dependency missing (#174)
Dave Miller [Sun, 28 Apr 2024 04:47:08 +0000 (00:47 -0400)]
Bug
1851354 : blocklist MySQL 8+, offer MariaDB (#141)
Dave Miller [Sun, 28 Apr 2024 04:31:36 +0000 (00:31 -0400)]
(no bug) Backout PR #60 - new feature not valid for stable branch (#164)
This was accidentally included in the 5.0.4 branch, which should have branched just before this commit. Everything else after it before we did end up branching would have been cherry-picked anyway.
Dave Miller [Sat, 18 Nov 2023 08:32:48 +0000 (03:32 -0500)]
Bug
1560873 : blacklist broken versions of Template-Toolkit (#134)
Dave Miller [Sat, 18 Nov 2023 08:23:41 +0000 (03:23 -0500)]
Bug
1786951 : Make the update check work on the 5.0.4 branch (#147)
* Bug
1786951 : Make the update check work on the 5.0.4 branch
Dave Miller [Thu, 14 Sep 2023 11:30:37 +0000 (06:30 -0500)]
Bug
1852497 : Use actions/checkout@v4 in GitHub Actions (#150)
Dave Miller [Mon, 4 Sep 2023 05:27:30 +0000 (01:27 -0400)]
Bug
1769248 : get ReadTheDocs to build the POD docs (#137)
Dave Miller [Mon, 28 Aug 2023 18:46:43 +0000 (14:46 -0400)]
Bug
1839072 : fix Apache config not showing in quickstart docs (#130)
Jacob Michalskie [Sun, 15 Jan 2023 02:32:07 +0000 (03:32 +0100)]
Move Directory out of VirtualHost (5.0) (#121)
* Move Directory out of VirtualHost
* Unindent the block
* Remove VirtualHost block and refer to Apache section
* Switch over to using webapps directory
Dylan Hardison [Sat, 29 Oct 2022 20:08:25 +0000 (13:08 -0700)]
Fix pod tests by adding documentation (#123)
Added documentation for all undocumented functions in Bugzilla::Util.
fixed pod syntax as well.
Dave Miller [Sat, 10 Sep 2022 20:30:53 +0000 (16:30 -0400)]
Bug
1785938 : Make tests work in GHA on 5.0.4 branch (#111)
* Add GHA tests on 5.0.4 branch
* fix new perl compat in tests
Jacob Michalskie [Sat, 3 Sep 2022 21:18:48 +0000 (23:18 +0200)]
Bug
1785943 : Update the MySQL, Linux and Quick Start in the Installation documentation 5.0 (#113)
* Update the Linux and Quick Start in the Installation documentation
* Update the notes to mention MySQL 8 incompatibility and MariaDB as a replacement
* Default to MariaDB and mention how it relates to MySQL
* Switch to mention how to install optional modules outside of dnf
Dave Miller [Thu, 16 Dec 2021 23:45:25 +0000 (18:45 -0500)]
Bug
1657496 : correctly handle MIME type on single-part email. r=eseyman, a=justdave
Linh Nguyen [Sat, 20 Nov 2021 05:46:26 +0000 (00:46 -0500)]
Remove Landfill reference (#103)
* Remove Landfill reference and update test site (#1)
* Update README
* Update README
* Update bugzilla-submit.xml
* Update creating-an-account.rst
* Update filing.rst
* Update finding.rst
* Address review comments
Suriyaa Sundararuban [Mon, 22 Mar 2021 04:45:26 +0000 (05:45 +0100)]
Use HTTPS protocol in documentation (#64)
Georgi D. Sotirov [Fri, 24 May 2019 14:32:38 +0000 (17:32 +0300)]
Add viewport meta (#78)
Add viewport meta to improve rendering on mobile devices. Without this meta Google Search tools would report Bugzilla pages as not suitable for mobile devices.
Arshad Kazmi [Tue, 25 Sep 2018 21:03:41 +0000 (02:33 +0530)]
Bug
1226123 - Email addresses with an apostrophe in them break the "Send Mail to Bug Assignees" button in buglists
Dylan William Hardison [Wed, 21 Mar 2018 02:06:11 +0000 (22:06 -0400)]
add a new hook: template_after_create (#60)
Quanah Gibson-Mount [Wed, 21 Mar 2018 01:52:16 +0000 (18:52 -0700)]
bug
1429243 - Fix default values for version and op_sys when importing from Jitterbugs
David Lawrence [Fri, 16 Feb 2018 19:24:54 +0000 (14:24 -0500)]
Bumped versions post-release
David Lawrence [Fri, 16 Feb 2018 16:39:07 +0000 (11:39 -0500)]
Bumped version to 5.0.4
David Lawrence [Fri, 16 Feb 2018 16:38:33 +0000 (11:38 -0500)]
Bug
1438593 : Release notes for Bugzilla 5.0.4
r/a=dylan
Dylan William Hardison [Fri, 16 Feb 2018 16:37:21 +0000 (11:37 -0500)]
Bug
1433400 (CVE-2018-5123) Prevent cross-site image requests from leaking contents of certain fields due to regex search
r=jfearn,a=dylan
Quanah Gibson-Mount [Thu, 4 Jan 2018 15:51:54 +0000 (07:51 -0800)]
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=
1427623 by setting (#57)
the priority on import
Quanah Gibson-Mount [Thu, 4 Jan 2018 15:51:06 +0000 (07:51 -0800)]
Significant update to jb2bz.py. (#58)
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=
1427626
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=
1427638
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=
1427664
Convert jb2bz to use "email" module rather than rfc822, multifile,
mimetools, and StringIO for easier manipulation of the mailbox objects.
This fixed (among other things)
1427626 as the Subject of the email is
now obtained correctly.
Fix the date formatting throughout to always use UTC, which is what
Bugzilla expects for the dates. This fixed
1427638 .
Fix attachment processing, which was using multifile rather than walking
the parts of the email object. This fixed part of
1427664
Fix the fact that the process_reply_file function never checked for
attachments in any followups. This fixed part of
1427664
Fix attachment processor to ignore various signatures and message/rfc822
multipart messages. For the latter, it sets "filename=" values to files
that don't actually exist, which caused attachment processing to bomb.
Vitaly Belekhov [Thu, 4 Jan 2018 15:50:05 +0000 (22:50 +0700)]
Bug
1301887 - File::Slurp triggers warnings on perl 5.24 (#53)
* Bug
1301887 - File::Slurp triggers warnings on perl 5.24 and it is recommended to not use it (#21)
r=mtyson
* Fix for vrite in
aa735d4
* Added https://gitweb.gentoo.org/proj/gentoo-bugzilla.git/commit/?id=
ca7bfc9c485c959fad2aee1f7c1dbc0fb484553b
Gervase Markham [Fri, 8 Sep 2017 11:08:34 +0000 (12:08 +0100)]
Bug
1398100 - tiny tweaks to release notes
Dylan William Hardison [Wed, 19 Oct 2016 13:09:43 +0000 (09:09 -0400)]
Revert "Bug
1306534 - Crash when pasting UTF8 text as an attachment"
This reverts commit
89cb60fe38a7962c876bce18368db90cedda84eb .
Frédéric Buclin [Mon, 17 Oct 2016 21:43:31 +0000 (21:43 +0000)]
Bug
1310728 - editflagtypes.cgi crashes when classifications are enabled and the user hasn't global editcomponents privs
r/a=dkl
Matt Tyson [Tue, 11 Oct 2016 23:07:32 +0000 (19:07 -0400)]
Bug
1306534 - Crash when pasting UTF8 text as an attachment
r=dylan
Dylan William Hardison [Sat, 8 Oct 2016 17:09:18 +0000 (13:09 -0400)]
nit: wrong method call in Bugzilla::Migrate
Dylan William Hardison [Sat, 8 Oct 2016 17:01:39 +0000 (10:01 -0700)]
Bug
1300437 - DateTime::TimeZone::offset_as_string called incorrectly (#19)
Andrea Orsini [Mon, 19 Sep 2016 15:14:14 +0000 (11:14 -0400)]
Bug
1303702 - bug history table 'when' column shows 00:00 only using sqlite
r/a=dylan
David Lawrence [Wed, 7 Sep 2016 17:48:29 +0000 (13:48 -0400)]
- New CI docker image for testing
Gervase Markham [Fri, 5 Aug 2016 13:49:51 +0000 (14:49 +0100)]
Bug
1292510 - replace references to git.mozilla.org with references to github. r=dylan
Frédéric Buclin [Wed, 1 Jun 2016 10:52:15 +0000 (12:52 +0200)]
Fix the default API URL
Frédéric Buclin [Wed, 1 Jun 2016 08:17:46 +0000 (10:17 +0200)]
Bug
1269266 - API links for Bugzilla 5+ not working anymore
Frédéric Buclin [Thu, 19 May 2016 22:42:54 +0000 (00:42 +0200)]
Bug
1273846 - Checksetup fails to update chart storage during pre-3.6 -> 5.0 upgrade
r/a=dkl
David Lawrence [Mon, 16 May 2016 20:03:20 +0000 (20:03 +0000)]
Bumped version post-release
David Lawrence [Mon, 16 May 2016 18:43:56 +0000 (18:43 +0000)]
Bumped version to 5.0.3
Frédéric Buclin [Mon, 16 May 2016 18:23:43 +0000 (20:23 +0200)]
Bug
1253263 - (CVE-2016-2803) [SECURITY] XSS vulnerability in dependency graphs via bug summary
r/a=dkl
Frédéric Buclin [Fri, 13 May 2016 18:37:08 +0000 (20:37 +0200)]
Bug
1269388 - Release notes for Bugzilla 5.0.3
r=dkl
Dylan William Hardison [Fri, 13 May 2016 17:34:19 +0000 (13:34 -0400)]
Bug
1250114 - XSS possible in extensions calling global/tabs.html.tmpl if tab.link is user-controlled
David Lawrence [Mon, 2 May 2016 14:30:07 +0000 (10:30 -0400)]
Add build.platform = linux64, machine.platform = linux64 to taskgraph.json to remove b2gtest from Treeherder results
Frédéric Buclin [Mon, 25 Apr 2016 21:39:02 +0000 (23:39 +0200)]
Bug
1259881 - CSV export vulnerable to formulae injection (again)
r=sgreen a=dkl
Albert Ting [Wed, 20 Apr 2016 01:50:44 +0000 (01:50 +0000)]
Bug 542239 - Accept pronouns everywhere in query.cgi
r=dkl,a=dkl
Frédéric Buclin [Fri, 15 Apr 2016 19:30:36 +0000 (21:30 +0200)]
Bug
1232171 - 'make clean' shouldn't delete rst/, images/ and Makefile, only generated files
r=gerv
Frédéric Buclin [Sun, 10 Apr 2016 00:12:18 +0000 (02:12 +0200)]
Email::MIME::Attachment::Stripper is no longer used, see bug 437076
Frédéric Buclin [Sat, 9 Apr 2016 16:06:21 +0000 (18:06 +0200)]
Fix an incorrect URL in the documentation
Frédéric Buclin [Fri, 8 Apr 2016 23:33:30 +0000 (01:33 +0200)]
Bug
1204957 - Locally compiled POD documentation is no longer accessible from docs/en/html/api/
r=dkl
Frédéric Buclin [Tue, 5 Apr 2016 23:54:54 +0000 (01:54 +0200)]
Bug
1246228 - Email addresses must not be encoded
r/a=dkl
Frédéric Buclin [Tue, 5 Apr 2016 15:22:25 +0000 (17:22 +0200)]
Bug
1261124 : When deleting a component, this component is listed again
r/a=dkl
Frédéric Buclin [Fri, 1 Apr 2016 21:33:04 +0000 (23:33 +0200)]
Bug
1260027 : Document how to compile the documentation on Windows
r=gerv
Frédéric Buclin [Fri, 1 Apr 2016 20:01:20 +0000 (22:01 +0200)]
Bug
1200010 : The Quick Start doc should stop assuming Bugzilla is your single application
r=gerv
Frédéric Buclin [Sat, 26 Mar 2016 23:31:42 +0000 (00:31 +0100)]
Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl
Frédéric Buclin [Mon, 21 Mar 2016 22:18:07 +0000 (23:18 +0100)]
Bug
1255619 : CGI scripts should not send duplicated headers
r/a=dkl
Frédéric Buclin [Sat, 19 Mar 2016 16:33:48 +0000 (17:33 +0100)]
Bug
1230932 : Providing a condition as an ID to the webservice results in a taint error
r/a=dkl
Frédéric Buclin [Tue, 15 Mar 2016 16:11:52 +0000 (17:11 +0100)]
Bug
1253267 : Possible DOT injection vulnerability in dependency graphs if long bug summaries are wrapped
r/a=dkl
Thorsten Schöning [Wed, 9 Mar 2016 22:22:17 +0000 (23:22 +0100)]
Bug
1250908 : "Use of uninitialized value" warning thrown when creating a new bug depending or blocking another one
r=LpSolit a=dkl
Frédéric Buclin [Wed, 9 Mar 2016 22:06:28 +0000 (23:06 +0100)]
Bug
1234977 : Replace \d+ by [0-9]+ in critical validation places
r=dylan a=dkl
Frédéric Buclin [Sun, 6 Mar 2016 15:45:25 +0000 (16:45 +0100)]
IIS instructions work with Windows 10 too
Frédéric Buclin [Tue, 23 Feb 2016 22:50:26 +0000 (23:50 +0100)]
Bug
1250354 : The "Forgot password" link should not be displayed if users are not allowed to change it
r/a=dkl
Frédéric Buclin [Mon, 22 Feb 2016 22:09:20 +0000 (23:09 +0100)]
Bug
1250264 : Extensions have no easy way to override favicon.ico
r/a=dkl
David Lawrence [Mon, 22 Feb 2016 20:49:32 +0000 (20:49 +0000)]
- task.expires needs to be greater than artifacts.expires
David Lawrence [Mon, 22 Feb 2016 15:25:40 +0000 (15:25 +0000)]
- Update artifact expiration date
Frédéric Buclin [Wed, 17 Feb 2016 11:33:03 +0000 (12:33 +0100)]
Bug
1242263 : The web server and SQL server sections are not correctly referenced in the documentation
r=gerv
David Lawrence [Mon, 8 Feb 2016 18:38:03 +0000 (18:38 +0000)]
Travis CI config file no longer necessary
Frédéric Buclin [Mon, 8 Feb 2016 18:31:27 +0000 (19:31 +0100)]
Bug
1246531 : REST_DOC should point to bugzilla.readthedocs.org instead of bugzilla.org
r/a=dkl
Frédéric Buclin [Mon, 8 Feb 2016 18:27:33 +0000 (19:27 +0100)]
Bug
1046241 : All links to the documentation displayed besides error messages are broken
r=gerv a=dkl
David Lawrence [Tue, 26 Jan 2016 15:17:18 +0000 (15:17 +0000)]
Bug
1240752 - Attachment data submitted via REST API must always be base64 encoded
r=gerv,a=dkl
Frédéric Buclin [Fri, 8 Jan 2016 18:53:11 +0000 (19:53 +0100)]
Bug
1235271 : Remove .htaccess from .gitignore
r/a=dkl
Frédéric Buclin [Thu, 7 Jan 2016 20:45:23 +0000 (21:45 +0100)]
Bug 402039: Exporting CSV from chart.cgi doesn't set mimetype, content_disposition, or filename
r/a=dkl
Frédéric Buclin [Thu, 7 Jan 2016 20:37:36 +0000 (21:37 +0100)]
Bug 324242: Unsetting shutdownhtml requires too much intimate knowledge
r/a=dkl
Frédéric Buclin [Thu, 7 Jan 2016 00:45:27 +0000 (01:45 +0100)]
Addl. fix for bug
1089448 : also detaint $ENV{WINDIR} on Windows
Mahdi Mokhtari [Tue, 5 Jan 2016 14:06:16 +0000 (15:06 +0100)]
Bug
1235270 : Set submitter_id before calling _check_data()
r=LpSolit a=dkl
Frédéric Buclin [Tue, 5 Jan 2016 13:47:05 +0000 (14:47 +0100)]
Bug
1045782 : Existing URLs in the See Also field should not throw an error when the bug is displayed
r/a=dkl
Frédéric Buclin [Mon, 4 Jan 2016 22:51:02 +0000 (23:51 +0100)]
Bug
1191706 : When editing flag types, components do not match the selected product when classifications are enabled
r/a=dkl
Dylan Hardison [Sat, 2 Jan 2016 23:54:48 +0000 (18:54 -0500)]
Bug
1235395 - whine.pl broken due to a missing generate_email() routine
r=lpsolit,a=dylan
Frédéric Buclin [Tue, 29 Dec 2015 00:42:43 +0000 (01:42 +0100)]
Bug
1235271 : Remove .htaccess from .gitignore
r/a=dkl
Frédéric Buclin [Mon, 28 Dec 2015 18:31:00 +0000 (19:31 +0100)]
Bug
1235415 : Use "AllowOverride All" everywhere
David Lawrence [Tue, 22 Dec 2015 21:51:31 +0000 (21:51 +0000)]
Bumped version post-release
David Lawrence [Tue, 22 Dec 2015 21:03:32 +0000 (21:03 +0000)]
Revert "Add missing use List::MoreUtils"
This reverts commit
d4470f34b627bb5a15a0af496db67185a922f4f5 .
David Lawrence [Tue, 22 Dec 2015 21:01:15 +0000 (21:01 +0000)]
Revert "Bug
1230932 - Providing a condition as an ID to the webservice results in a taint error"
This reverts commit
396ae88235ef68ed45978dfb36774c5fe9a2d699 .
Dylan Hardison [Tue, 22 Dec 2015 20:42:31 +0000 (15:42 -0500)]
Add missing use List::MoreUtils
David Lawrence [Tue, 22 Dec 2015 19:16:45 +0000 (19:16 +0000)]
Bumped version to 5.0.2
Dylan Hardison [Tue, 22 Dec 2015 18:34:38 +0000 (13:34 -0500)]
Bug
1232785 - [SECURITY] Buglists in CSV format can be parsed as valid javascript in some browsers
r=dkl,a=dkl
Frédéric Buclin [Tue, 22 Dec 2015 17:58:16 +0000 (18:58 +0100)]
Bug
1221518 : (CVE-2015-8508) [SECURITY] XSS in dependency graphs when displaying the bug summary
r=gerv a=dkl
Dylan Hardison [Tue, 22 Dec 2015 17:08:32 +0000 (12:08 -0500)]
Bug
1230932 - Providing a condition as an ID to the webservice results in a taint error
r=dkl,a=dkl
Frédéric Buclin [Tue, 22 Dec 2015 15:50:01 +0000 (16:50 +0100)]
Update release notes