summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2013-11-13Bug 843457: PROJECT environment variable is not honored when mod_perl is enabledFrédéric Buclin1-3/+11
2013-10-17Bump version post-releaseDave Lawrence1-1/+1
2013-10-16Bump version to 4.2.7Dave Lawrence2-3/+3
2013-10-16Bug 924932: (CVE-2013-1743) [SECURITY] Field values are (still) not escaped c...Frédéric Buclin1-14/+24
2013-10-16Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not sanit...Frédéric Buclin2-5/+3
2013-10-16Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachmentsFrédéric Buclin1-8/+11
2013-10-16Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ...Dave Lawrence1-1/+1
2013-10-16Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing ...Dave Lawrence1-3/+3
2013-10-16Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy ...Dave Lawrence3-8/+24
2013-10-12Bug 912640: Release notes for Bugzilla 4.2.7Frédéric Buclin1-0/+30
2013-09-27Bug 914262: KHTML-based browsers such as Konqueror do not support the Server-...Frédéric Buclin1-1/+1
2013-09-23Bug 919475: [Oracle] Crash when non-mandatory free text custom fields are lef...Jiří Netolický1-0/+4
2013-09-03Bug 848063: [Oracle] importxml.pl fails with ORA-01830: comment timestamps ar...Mateusz Kuśmierczyk1-1/+1
2013-08-10Back out bug 868330 for the 4.2 branch. This is not a security fixFrédéric Buclin2-13/+4
2013-08-09Bug 902515: Internet Explorer 11 receives multipart/x-mixed-replace content f...Frédéric Buclin1-1/+1
2013-08-09Bug 868330 - Password creation directions incompleteSunil Joshi2-4/+13
2013-08-09Bug 897264 - letters_numbers_specialchars password restriction is incorrectSimon Green2-16/+16
2013-08-07Bug 901620 - Grammar error in the documentationSunil Joshi1-1/+1
2013-07-24Bug 880653 - Add POD for Bug.possible_duplicates webserviceDave Lawrence1-0/+53
2013-07-15Bug 787328 - xmlrpc.cgi doesn't send any security-related headersDave Lawrence1-2/+10
2013-05-22Bump version post-releaseDave Lawrence1-1/+1
2013-05-22Bump version to 4.2.6Dave Lawrence2-3/+3
2013-05-22Bug 828344: add missing xt broken testsByron Jones1-2/+23
2013-05-20Bug 828344: "contains all of the words" no longer looks for all words within ...Byron Jones8-58/+251
2013-05-18Bug 870701: Release notes for Bugzilla 4.2.6Frédéric Buclin1-0/+25
2013-05-05Bug 212471: Tabular reports do not link bug counts involving the empty resolu...Frédéric Buclin1-1/+2
2013-05-04Bug 859118 - Bug.search called with no arguments returns all visible bugs, ig...Dave Lawrence2-11/+48
2013-04-28Bug 848635: Old queries based on tags are no longer listed in the page footer...Frédéric Buclin1-6/+1
2013-04-28Bug 858909: When running checksetup.pl for the first time using Oracle as DB ...Frédéric Buclin1-1/+1
2013-04-18Bug 858911: Oracle fails with "ORA-04043: object T_GROUP_CONCAT does not exis...Frédéric Buclin1-1/+3
2013-04-17revert commit for bug 828344Byron Jones3-138/+34
2013-04-17Bug 828344: Make "contains all of the words" look for all words within the sa...Byron Jones3-34/+138
2013-04-16Bug 782210: If a custom field depends on a product, component or classificat...Pami Ketolainen2-8/+13
2013-04-15Bug 861528: $user->can_enter_product() now returns the product object instead...Frédéric Buclin1-2/+3
2013-04-11Bug 860723: Custom fields are shown twice in report axis selectorsPami Ketolainen2-14/+0
2013-04-09Bug 355620: Lines enclosed in <simplelist> do not wrap in the PDF version of ...Christopher Trom2-185/+344
2013-04-05Bug 857562: ajax_user_autocompletion param ignored on Search by People fieldsFrédéric Buclin1-2/+2
2013-04-05Bug 855258: The dependency graph always uses urlbase, even when sslbase is in...Frédéric Buclin1-1/+1
2013-03-26Bug 854074: Remove all references to the uwinnipeg.ca PPM repository as it is...Frédéric Buclin4-69/+2
2013-03-20Bug 852560: Bugzilla cannot be installed with MySQL 5.6, because the have_inn...Frédéric Buclin1-3/+2
2013-03-16Bug 827983: "[reply]" link besides the original description will insert ("in ...Hugo Seabrook2-30/+12
2013-03-12Bug 850126 - 'token' id defined twice on logged-out pages (in header and footer)Reed Loden1-1/+1
2013-03-08Bug 848250: Bug summary tooltip now includes "---" for unresolved bugsFrédéric Buclin1-1/+3
2013-02-20Bump version post-releaseDave Lawrence1-1/+1
2013-02-19Bumped current yearDave Lawrence1-1/+1
2013-02-19Bump version to 4.2.5Dave Lawrence2-3/+3
2013-02-19Bug 842038: (CVE-2013-0785) [SECURITY] XSS in show_bug.cgi when using an inva...Frédéric Buclin2-6/+6
2013-02-19Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence ...Simon Green4-2/+22
2013-02-19Bug 832264: Release notes for Bugzilla 4.2.5Frédéric Buclin1-0/+33
2013-02-17Bug 839950: Cannot search by Change History on multi-select fieldsMatt Tyson1-2/+6