summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2014-04-17Bumped version post-releaseDavid Lawrence2-2/+2
2014-04-17Bump version to 4.2.8David Lawrence2-4/+4
2014-04-17Bug 968576: [SECURITY] Dangerous control characters allowed in Bugzilla textManish Goregaokar4-2/+17
r=glob a=justdave
2014-04-15Bug 996168: Release notes for Bugzilla 4.2.8Frédéric Buclin1-0/+31
r=dkl a=justdave
2014-03-14Copied over .bzrignore to .gitignoreDavid Lawrence1-0/+32
2013-12-21Bug 748095: Bugzilla crashes when the shutdownhtml parameter is set and ↵Frédéric Buclin1-1/+1
using a non-cookie based authentication method r=dkl a=justdave
2013-12-05Bug 942599: Documentation about possible_duplicates() lists 'products' as ↵Frédéric Buclin1-1/+1
argument instead of 'product' r=dkl a=justdave
2013-12-02Bug 938300: vers_cmp() incorrectly compares module versionsFrédéric Buclin1-15/+14
r=sgreen a=justdave
2013-12-02Bug 781672: checksetup.pl fails to check the version of the latest ↵Frédéric Buclin1-2/+9
Apache2::SizeLimit release (it throws "Invalid version format (non-numeric data)") r=dkl a=justdave
2013-11-14Bug 938161: sql_date_format() method for SQLite has an incorrect default formatFrédéric Buclin1-1/+1
r/a=glob
2013-11-13Bug 843457: PROJECT environment variable is not honored when mod_perl is enabledFrédéric Buclin1-3/+11
r/a=glob
2013-10-17Bump version post-releaseDave Lawrence1-1/+1
2013-10-16Bump version to 4.2.7Dave Lawrence2-3/+3
2013-10-16Bug 924932: (CVE-2013-1743) [SECURITY] Field values are (still) not escaped ↵Frédéric Buclin1-14/+24
correctly in tabular reports r=dkl a=glob
2013-10-16Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not ↵Frédéric Buclin2-5/+3
sanitized when editing flag types if categoryAction-foo is set r=dkl a=glob
2013-10-16Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachmentsFrédéric Buclin1-8/+11
r=dkl a=sgreen
2013-10-16Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵Dave Lawrence1-1/+1
and allowing easier brute force r=LpSolit,a=sgreen
2013-10-16Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing ↵Dave Lawrence1-3/+3
total entropy and allowing easier brute force r=LpSolit,a=sgreen
2013-10-16Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ↵Dave Lawrence3-8/+24
and allowing easier brute force r=LpSolit,a=glob
2013-10-12Bug 912640: Release notes for Bugzilla 4.2.7Frédéric Buclin1-0/+30
r=dkl a=LpSolit
2013-09-27Bug 914262: KHTML-based browsers such as Konqueror do not support the ↵Frédéric Buclin1-1/+1
Server-Push technology r=dkl a=justdave
2013-09-23Bug 919475: [Oracle] Crash when non-mandatory free text custom fields are ↵Jiří Netolický1-0/+4
left empty on bug creation r=LpSolit a=justdave
2013-09-03Bug 848063: [Oracle] importxml.pl fails with ORA-01830: comment timestamps ↵Mateusz Kuśmierczyk1-1/+1
are not correctly formatted r=LpSolit a=sgreen
2013-08-10Back out bug 868330 for the 4.2 branch. This is not a security fixFrédéric Buclin2-13/+4
2013-08-09Bug 902515: Internet Explorer 11 receives multipart/x-mixed-replace content ↵Frédéric Buclin1-1/+1
from buglist.cgi r=dkl a=sgreen
2013-08-09Bug 868330 - Password creation directions incompleteSunil Joshi2-4/+13
r=sgreen, a=sgreen
2013-08-09Bug 897264 - letters_numbers_specialchars password restriction is incorrectSimon Green2-16/+16
r=LpSolit, a=sgreen
2013-08-07Bug 901620 - Grammar error in the documentationSunil Joshi1-1/+1
r=sgreen, a=glob
2013-07-24Bug 880653 - Add POD for Bug.possible_duplicates webserviceDave Lawrence1-0/+53
r=LpSolit,a=sgreen
2013-07-15Bug 787328 - xmlrpc.cgi doesn't send any security-related headersDave Lawrence1-2/+10
r=glob,a=justdave
2013-05-22Bump version post-releaseDave Lawrence1-1/+1
2013-05-22Bump version to 4.2.6Dave Lawrence2-3/+3
2013-05-22Bug 828344: add missing xt broken testsByron Jones1-2/+23
2013-05-20Bug 828344: "contains all of the words" no longer looks for all words within ↵Byron Jones8-58/+251
the same comment or flag r=LpSolit, a=LpSolit
2013-05-18Bug 870701: Release notes for Bugzilla 4.2.6Frédéric Buclin1-0/+25
r=dkl a=LpSolit
2013-05-05Bug 212471: Tabular reports do not link bug counts involving the empty ↵Frédéric Buclin1-1/+2
resolution correctly r=dkl a=LpSolit
2013-05-04Bug 859118 - Bug.search called with no arguments returns all visible bugs, ↵Dave Lawrence2-11/+48
ignoring max_search_results and search_allow_no_criteria r/a=LpSolit
2013-04-28Bug 848635: Old queries based on tags are no longer listed in the page ↵Frédéric Buclin1-6/+1
footer by default when upgrading from 4.0 or older to 4.2 r=glob a=LpSolit
2013-04-28Bug 858909: When running checksetup.pl for the first time using Oracle as DB ↵Frédéric Buclin1-1/+1
server, you get an "uninitialized value" warning r=dkl a=LpSolit
2013-04-18Bug 858911: Oracle fails with "ORA-04043: object T_GROUP_CONCAT does not ↵Frédéric Buclin1-1/+3
exist" when installing Bugzilla for the first time r=dkl a=LpSolit
2013-04-17revert commit for bug 828344Byron Jones3-138/+34
2013-04-17Bug 828344: Make "contains all of the words" look for all words within the ↵Byron Jones3-34/+138
same comment or flag r=LpSolit, a=LpSolit
2013-04-16Bug 782210: If a custom field depends on a product, component or ↵Pami Ketolainen2-8/+13
classification, the "mandatory" bit is ignored on bug creation r/a=LpSolit
2013-04-15Bug 861528: $user->can_enter_product() now returns the product object ↵Frédéric Buclin1-2/+3
instead of 1 r=glob a=LpSolit
2013-04-11Bug 860723: Custom fields are shown twice in report axis selectorsPami Ketolainen2-14/+0
r/a=LpSolit
2013-04-09Bug 355620: Lines enclosed in <simplelist> do not wrap in the PDF version of ↵Christopher Trom2-185/+344
the Bugzilla Guide r/a=LpSolit
2013-04-05Bug 857562: ajax_user_autocompletion param ignored on Search by People fieldsFrédéric Buclin1-2/+2
r=dkl a=LpSolit
2013-04-05Bug 855258: The dependency graph always uses urlbase, even when sslbase is ↵Frédéric Buclin1-1/+1
in use r=glob a=LpSolit
2013-03-26Bug 854074: Remove all references to the uwinnipeg.ca PPM repository as it ↵Frédéric Buclin4-69/+2
is no longer available r=glob a=LpSolit
2013-03-20Bug 852560: Bugzilla cannot be installed with MySQL 5.6, because the ↵Frédéric Buclin1-3/+2
have_innodb variable no longer exists r=glob a=LpSolit
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-11-16 23:35:48 +0100