Red-Hat-Bugzilla / rh-bugzilla

Clone
Source Code
GIT

Commits 2846

master
Bump version number to 2.19.1 for snapshot release
justdave%bugzilla.org • 19 years ago  
a513912
[SECURITY] Bug 250605: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when receiving bug change notification mails. This only affects sites that use the 'insidergroup' feature.
justdave%bugzilla.org • 19 years ago  
f4c3d84
[SECURITY] Bug 253544: Changes to the metadata (filename, description, mime type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when viewing the bug activity log. This only affects sites that use the 'insidergroup' feature.
justdave%bugzilla.org • 19 years ago  
22628e0
[SECURITY] Bug 263780: Exporting a bug to XML exposes user comments and attachment summaries which are marked as private to users who are not members of the group allowed to see private comments and attachments. XML export is not exposed in the user interface, but is available to anyone who knows the correct URL to invoke it. This only affects sites that use the 'insidergroup' feature.
justdave%bugzilla.org • 19 years ago  
53bd4df
[SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.
justdave%bugzilla.org • 19 years ago  
23df77b
Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is submitted multiple times.
justdave%bugzilla.org • 19 years ago  
b121584
Bug 254498: Check for comment required for time validation was too late.
justdave%bugzilla.org • 19 years ago  
fe879a3
Backing out patch for bug 251596: found a problem with it after I committed. See the bug.
justdave%bugzilla.org • 19 years ago  
77c85a8
Bug 251596: show.html.tmpl wasn't using the customized body attribute
justdave%bugzilla.org • 19 years ago  
e63b2d6
Documentation patch for bug 143490: Update documentation regarding code changes needed when running Bugzilla under win32 (some are no longer required since checksetup.pl no longer calls unsupported functions when running on Windows); patch by GavinS <bugzilla@chimpychompy.org>, r=vladd.
jocuri%softhome.net • 19 years ago  
6045801
Patch for bug 192218: Ability to use a hyphen as a way to filter specifically for requests with no requestee; patch by Frédéric Buclin <LpSolit@netscape.net>; r=myk, a=myk.
jocuri%softhome.net • 19 years ago  
e2b4bb1
Patch for bug 252137: tabular reports shouldn't be broken if a row/col/tbl header begins with an underscore; patch by Rob Siklos <rsiklos@adexa.com>; r=gerv, a=justdave.
jocuri%softhome.net • 19 years ago  
ef67744
Bug 265731: multipart_start in the server-push handling code wasn't honoring the $cgi->charset setting.
justdave%bugzilla.org • 19 years ago  
8100ea2
fix for bug 265499: support custom stylesheets; r=gerv, a=myk
myk%mozilla.org • 19 years ago  
c43a96b
fix for bug 263250: adds a base tag to the simple buglist so it can be loaded in an iframe on a remote site and have the CSS still work
myk%mozilla.org • 19 years ago  
229f800
fix for bug 256208: makes checksetup.pl create CVS-ignored skins/custom/ and children; r=gerv, a=justdave
myk%mozilla.org • 19 years ago  
46d3352
Fix for bug 256207: moves CSS files to skins/standard/ as part of CSS plan; r=gerv, a=justdave
myk%mozilla.org • 19 years ago  
e843ae2
Fix for bug 265240: make collectstats generate valid RDF by not cutting off the opening RDF tag; r=kiko, a=myk
myk%mozilla.org • 19 years ago  
b50ddb4
Patch for bug 232155: Remove uninitialized value warning from Pperl's Cookie.pm and unify code by removing redundancy; patch by Christian Reis <kiko@async.com.br> backported to 2.18 by Rob Siklos <rsiklos@adexa.com>; r=vladd,kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
f99b437
Fix for bug 265303: updates RDF content type to new standard application/rdf+xml; r,a=justdave
myk%mozilla.org • 19 years ago  
ad211c0
Patch for bug 264003: Include the DBI error in the error message if 'createdb' fails; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
b8cd838
Patch for bug 189073: Allow accept as a resolution when changing multiple bugs only if all bugs are opened; r=kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
7db6b82
Patch for bug 199811: Implement UI for 'contains none of the strings' search operator; patch by Marc Schumann <wurblzap@gmail.com>, r=kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
c9df754
Patch for bug 261434: implement functionality to delete a user semi-properly (only works for users with no bugs/comments); patch by Ivan Todoroski <grnch@gmx.net>; r=justdave, a=justdave.
jocuri%softhome.net • 19 years ago  
43b5d46
Patch for bug 251338: Installation section should mention that you need an MTA installed; patch by Colin S. Ogilvie <colin.ogilvie@gmail.com>; r=vladd, a=justdave.
jocuri%softhome.net • 19 years ago  
cf9ec9d
Patch for bug 257765: Make replies to private comments private by default; patch by Marc Schumann <wurblzap@gmail.com>, r=kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
87c62ab
Patch for bug 263165: Make Bugzilla specify table type as MyISAM when creating tables; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
40046fe
Patch for bug 256567: Harmonize descriptions of classifications and products in terms of 'FILTER html'; patch by Marc Schumann <wurblzap@gmail.com>; r=justdave, kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
1f6ed9b
Patch for bug 262126: fix invalid date parsing; patch by me, r=kiko, a=justdave.
jocuri%softhome.net • 19 years ago  
74d1dd7
Patch for bug 261210: adapt bz_secure CSS for text based browsers; patch by Jason Pyeron <jpyeron@pyerotechnics.com>; r=myk, a=myk.
jocuri%softhome.net • 19 years ago  
e23f186
Patch for bug 258712: whine.pl should honour emailsuffix; patch by Marc Schumann <wurblzap@gmail.com>; r=erik, a=justdave.
jocuri%softhome.net • 19 years ago  
f517c19
Patch for bug 237769: use Administrator instead of root for super-user name in Windows, and change the ppm repository from Apache to the one maintained on landfill; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=vladd, a=myk.
jocuri%softhome.net • 19 years ago  
126e11d
Patch for bug 261993: fix uninitialized value error in webserver log when accessing buglist.cgi (generated by the fix for bug 255512); patch by Marc Schumann <wurblzap@gmail.com>; r=justdave, a=myk.
jocuri%softhome.net • 19 years ago  
07a7c31
Fix for bug 103794: adds 'home' link to navigation bar; patch by GavinS; r,a=myk
myk%mozilla.org • 19 years ago  
2811a5a
Fix for bug 258029: sets whining group inheritance in the correct order. r,a=justdave
erik%dasbistro.com • 19 years ago  
aad5f43
Fix for bug 261446: checksetup.pl needs to update permissions on
kiko%async.com.br • 19 years ago  
53bad64
Landing fix for bug 153811: default severity should be parametrized.
kiko%async.com.br • 19 years ago  
60ac8ce
Fix for bug 252739: moves inclusion/exclusion action names to button name instead of button value so that button values (which are also used as labels) will be localizable; patch by Marc Schumann; r=kiko,myk; a=justdave
myk%mozilla.org • 19 years ago  
da7ecb0
Fix for bug 261273: make column changing work with Sun ONE web server; fix by tmabbott@hbs.edu; r,a=justdave
myk%mozilla.org • 19 years ago  
864e9a1
Bug 261071 Error: Error in parsing value for property 'vertical-align'. Declaration dropped.
timeless%mozdev.org • 19 years ago  
59bc1d8
Patch for bug 258938: Minor tweak to editmilestones templatization; patch by GavinS <bugzilla@chimpychompy.org>; r=jouni, a=justdave.
jocuri%softhome.net • 19 years ago  
23bff33
Patch for bug 255512: For bz_secure, distinguish between mandatory and non-mandatory groups and create distinct CSS classes to enable customizations by the admin; patch by Marc Schumann <wurblzap@gmail.com>; r=kiko, r=joel, a=justdave.
jocuri%softhome.net • 19 years ago  
3221340
Landing fix for bug 260411: MS IE breaks png alpha channel padlock. Adds
kiko%async.com.br • 19 years ago  
081484e
Bug 259452 Add bonsai style &mark support to showbug for bug comments
timeless%mozdev.org • 19 years ago  
5fa3cab
Fix for bug 245075: command-line script that sends bug mail so installations can push bug mail out if it's been missed by the code that sends mail when changes are made; written by Dave Miller
myk%mozilla.org • 19 years ago  
d95f60f
Bug 250979 - fix broken anchors to severity. Patch by Tobias Sager <moixa@gmx.ch>, r=gerv, a=justdave.
gerv%gerv.net • 19 years ago  
7928733
Bug 256004: Fix regression that caused duplicate sortkeys in the fielddefs table
justdave%bugzilla.org • 19 years ago  
234bfc8
Fix for bug 249868: makes series pages validate
myk%mozilla.org • 19 years ago  
2ac9cab
Fix for bug 240460: updates upgrading examples with new URLs and version numbers; r=gerv; a=justdave
myk%mozilla.org • 19 years ago  
b087d68
Oops, backing out changes to administration.xml that are supposed to be part of a different patch.
justdave%bugzilla.org • 19 years ago  
39ec55d
Bug 257534: Require Perl 5.8.1 or later when running on Windows with ActiveState Perl (there is no official CGI ppm build with a new enough version for Bugzilla on any earlier version of ActiveState Perl)
justdave%bugzilla.org • 19 years ago  
d452840
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.