From c40459bfccb6845dd60a52b85515df5fb8c2cdf8 Mon Sep 17 00:00:00 2001 From: "matty%chariot.net.au" Date: Fri, 7 Jun 2002 23:39:35 +0000 Subject: [PATCH] Release notes updates. git-svn-id: svn://10.0.0.236/trunk@122908 18797224-902f-48f8-a5cc-f745e15eee43 --- mozilla/webtools/bugzilla/docs/rel_notes.txt | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/mozilla/webtools/bugzilla/docs/rel_notes.txt b/mozilla/webtools/bugzilla/docs/rel_notes.txt index 9d84e6818f7..366673f974b 100644 --- a/mozilla/webtools/bugzilla/docs/rel_notes.txt +++ b/mozilla/webtools/bugzilla/docs/rel_notes.txt @@ -143,10 +143,6 @@ fix the problem on your installation. *** SECURITY ISSUES RESOLVED *** -- The bug list sort order could take arbitrary SQL. There - are no known exploits for this problem. - (bug 130821) - - The bug reporter could set the priority even when 'letsubmitterchoosepriority' was off. (bug 63018) @@ -401,6 +397,12 @@ fix the problem on your installation. corrupted. (bug 92263) +- The bug list sort order is now stricter about the SQL it will accept, + ensuring you use correct column name syntax. Before this, there were + some syntax checks, so it is not known whether this problem was + exploitable. + (bug 130821) + ******************************************** *** USERS UPGRADING FROM 2.14 OR EARLIER *** ********************************************