Red-Hat-Bugzilla / rh-bugzilla

Clone
Source Code
GIT

Commits 7316

master
Bumped current year
Dave Lawrence • 11 years ago  
cb97d0a
Un-bump version temporarily
Dave Lawrence • 11 years ago  
6490c27
Bump version prior to release
Dave Lawrence • 11 years ago  
6fbd988
Bump version to 3.6.13
Dave Lawrence • 11 years ago  
1d59ccd
Bug 842038: (CVE-2013-0785) [SECURITY] XSS in show_bug.cgi when using an invalid page format
Frédéric Buclin • 11 years ago  
0dfe1f9
Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access
Simon Green • 11 years ago  
4100437
Bug 832266: Release notes for Bugzilla 3.6.13
Frédéric Buclin • 11 years ago  
4efd47f
Bump version post-release
Dave Lawrence • 11 years ago  
9cc5364
Bump version to 3.6.12
Dave Lawrence • 11 years ago  
322bfcb
Bug 802204 (CVE-2012-4197): [SECURITY] Marking an attachment you cannot see as obsolete can disclose its description
Frédéric Buclin • 11 years ago  
9a99b34
Bug 731178 (CVE-2012-4199): [SECURITY] field-events.js.tmpl discloses product and component names that the user is not allowed to see
Frédéric Buclin • 11 years ago  
4f5274a
Fix typo
Frédéric Buclin • 11 years ago  
eda5330
Bug 807937: Fix POD
Koosha Khajeh Moogahi • 11 years ago  
b5b6514
Bug 805650: Release notes for Bugzilla 3.6.12
Frédéric Buclin • 11 years ago  
747180e
Fix typo
Frédéric Buclin • 11 years ago  
72fc51d
Bug 790215 - Flag names are not properly escaped when displayed on confirm user match page
Reed Loden • 11 years ago  
bce8235
Bumped version post-release
Dave Lawrence • 11 years ago  
ea9c429
Bump version to 3.6.11
Dave Lawrence • 11 years ago  
8dd1780
Bug 785470: (CVE-2012-3981) [SECURITY] Missing escaping of the username can lead to LDAP injection
Reed Loden • 11 years ago  
aa5c6fc
Bug 786355: Release notes for Bugzilla 3.6.11
Frédéric Buclin • 11 years ago  
c1dd9f6
Bug 785917: Custom field descriptions are not properly escaped when displayed as bug list column headers
Frédéric Buclin • 11 years ago  
2527c75
Bug 682317 - Bug.create is incorrectly documented as ignoring invalid fields; it should say it produces an error
Koosha Khajeh Moogahi • 11 years ago  
7fe4f33
Bumped version post release
Dave Lawrence • 11 years ago  
27c8ce3
Bump version to 3.6.10
Dave Lawrence • 11 years ago  
80ca093
Bug 777586: (CVE-2012-1969) [SECURITY] The description of private attachments is still visible to unauthorized users when mentioned in a comment
Frédéric Buclin • 11 years ago  
b99bee4
Bug 777676: Release notes for Bugzilla 3.6.10
Frédéric Buclin • 11 years ago  
516fcf5
Bug 776103 - Syntax error in Bugzilla::User::Setting API doc
Koosha Khajeh Moogahi • 11 years ago  
51ad03e
Bumping the version post-release
Dave Lawrence • 12 years ago  
73eee68
Bump version to 3.6.9
Dave Lawrence • 12 years ago  
63b4b4f
Bug 745397: (CVE-2012-0466) [SECURITY] The JS template for buglists permits attackers to access all bugs that the victim can see
Frédéric Buclin • 12 years ago  
4f358e6
Bug 728639: (CVE-2012-0465) [SECURITY] User lockout policy can be bypassed by altering the X-FORWARDED-FOR header
Frédéric Buclin • 12 years ago  
31809b1
Bug 746547: SMALLSERIAL is of type INT2, not INT1
Frédéric Buclin • 12 years ago  
2ab1865
Bug 727892: Update relnotes for 3.6.9
Frédéric Buclin • 12 years ago  
2be3927
Bug 727892: Release notes for Bugzilla 3.6.9
Frédéric Buclin • 12 years ago  
5c5a598
Bug 731725 - In the documentation license, the address of the FSF is incorrect
Emmanuel Seyman • 12 years ago  
fbaf828
Test 1 fails if PERLLIB contains paths with whitespace.
Marc Schumann • 12 years ago  
2aa5d77
Bug 727240: The POD for Bug.attachments is wrong about the format of the returned data
Frédéric Buclin • 12 years ago  
6abd21f
Bump the version number post-release
Dave Lawrence • 12 years ago  
3a155e9
Bumped to version 3.6.8
Dave Lawrence • 12 years ago  
0784753
Bug 718319: (CVE-2012-0440) [SECURITY] JSON-RPC permits to bypass token checks and can lead to CSRF (no victim's action required)
Frédéric Buclin • 12 years ago  
dd9cba5
Bug 714472: (CVE-2012-0448) [SECURITY] utf8 homoglyphs are allowed in email addresses, which could allow an attacker to be CC'ed to private bugs by accident
Frédéric Buclin • 12 years ago  
b169175
Bug 720751 - Release notes for Bugzilla 3.6.8
Dave Lawrence • 12 years ago  
47f9429
Bug 469068: SMTP parameters not documented
Matt Selsky • 12 years ago  
0c88f21
Bug 591638: In the admin page, the link to edit field values is named 'Field Values', not 'Legal Values'
A. Shimono • 12 years ago  
720d9b5
Bug 319684: The documentation is unclear about how to disable quips
Matt Selsky • 12 years ago  
b79ed2e
Bug 706753: Bugzilla will not work with newest version of JSON::RPC 1.01 due to non-backward compatibility
Frédéric Buclin • 12 years ago  
fed5fee
Bump the version number post-release
Dave Lawrence • 12 years ago  
e62fbb7
Bump version for 3.6.7
Dave Lawrence • 12 years ago  
0506742
Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account
Frédéric Buclin • 12 years ago  
d6527cb
Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular and graphical reports in debug mode
Byron Jones • 12 years ago  
8b84903
Bug 713344: Release notes for Bugzilla 3.6.7
Frédéric Buclin • 12 years ago  
b5325fb
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.