Mozilla

Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause XSS on this domain in IE 6-8 and Safari

2011-08-04 20:49:57 +00:00

Bug 385606: Logincookies are recreated at each HTTP request when using the 'Env' auth method - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-12-31 12:18:06 +00:00

Config

Bug 482584: Add a parameter to hide the "See Also" field

2009-04-17 22:30:33 +00:00

DB

Bug 538705: Prevent database connections from timing out during long

2010-03-17 08:46:41 +00:00

Field

Bug 504944: Use of uninitialized value in hash element at Bugzilla/Field/Choice.pm line 253 - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-07-23 21:35:59 +00:00

Install

Bug 646578: Remove the usage of Math::Random::Secure, as it is too difficult

2011-04-27 22:23:58 +00:00

Job

Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine

2009-09-10 23:47:27 +00:00

JobQueue

Bug 475403: A RHEL SysV Init Script for jobqueue.pl

2009-09-04 21:22:52 +00:00

Search

Bug 490562: QuickSearch "+" operator adds $qsword over and over for @subWords

2009-04-29 00:32:28 +00:00

Template/Plugin

Bug 517793: Use the ENCODING parameter of Template Toolkit instead of having a custom parser object. This also fixes a memory leak on mod_perl.

2009-09-26 23:37:31 +00:00

User

Bug 364161: Inefficient SQL: Selecting subclass from setting table

2008-09-05 23:03:03 +00:00

WebService

Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account

2011-12-28 22:21:31 +00:00

Attachment.pm

Bug 399074: Remove the 'maxpatchsize' parameter - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2008-12-10 18:32:30 +00:00

Auth.pm

Bug 134022: PERFORMANCE: deleting old login cookies locks login checks

2009-01-20 20:10:08 +00:00

Bug.pm

Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when creating or editing a bug

2011-08-04 20:20:54 +00:00

BugMail.pm

Bug 534587 - "Bugmail uses the timezone of the changee instead of the user receiving the mail" [p=reed r=mkanat a=mkanat]

2010-01-05 07:07:46 +00:00

CGI.pm

Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary

2010-11-02 23:37:45 +00:00

Chart.pm

Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular and graphical reports in debug mode

2011-12-28 22:03:37 +00:00

Classification.pm

Bug 471866: Classification name length and sortkey max value not validated - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

2009-01-04 23:15:31 +00:00

Component.pm

…

Config.pm

Bug 434801: [SECURITY] .htaccess doesn't prevent reading old-params.txt from the web - Patch by Reed Loden <reed@reedloden.com> r=mkanat a=LpSolit

2010-02-01 00:50:15 +00:00

Constants.pm

Bump the version number post-release

2012-02-01 00:04:54 +00:00

DB.pm

Bug 508181: UTF-8 table conversion was failing when there were FKs on the column or on related columns

2009-08-06 14:54:22 +00:00

Error.pm

Bug 435507: Provide a method of hooking the WebService error codes

2008-05-27 22:11:56 +00:00

Field.pm

Bug 557686: PostgreSQL crashes when deleting a custom field of type Date/Time

2010-04-07 01:18:54 +00:00

Flag.pm

Fix incorrect regexp for bug 333648 - Patch by me

2009-04-08 20:47:02 +00:00

FlagType.pm

Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object

2008-09-17 03:47:36 +00:00

Group.pm

Bug 505796 - Bugzilla::Group::grant_direct has refers to $self->{members_direct} instead of $self->{grant_direct}

2009-07-22 19:41:52 +00:00

Hook.pm

Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:47:37 +00:00

Install.pm

Bug 405355: Move flatten_group_membership() from User.pm to Group.pm - Patch by arbingersys <arbingersys@gmail.com> r/a=LpSolit

2009-01-25 18:49:31 +00:00

JobQueue.pm

Bug 530270: Whining fails if mail queueing is enabled - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-11-22 22:26:04 +00:00

Keyword.pm

…

Mailer.pm

Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:47:37 +00:00

Milestone.pm

Bug 408172: [Oracle] Bug lists longer than 1000 bugs fail

2008-01-18 15:56:55 +00:00

Object.pm

Bug 583690: (CVE-2010-2759) [SECURITY][PostgreSQL] Bugzilla crashes when viewing a bug if a comment contains 'bug <num>' or 'attachment <num>' where <num> is greater than the max allowed integer

2010-08-04 22:22:01 +00:00

Product.pm

Bug 577139: (CVE-2010-2758) [SECURITY] request.cgi and duplicates.cgi let you know whether a product exists or not

2010-08-04 22:04:01 +00:00

Search.pm

Bug 417048: (CVE-2010-2756) [SECURITY] Boolean charts let me query for users being in any given group

2010-08-04 21:35:40 +00:00

Series.pm

2009-08-17 23:01:46 +00:00

Status.pm

Bug 308253: Ability to add select (enum) fields to a bug whose list of values depends on the value of another field

2008-11-07 11:34:57 +00:00

Template.pm

Bug 657158 - (CVE-2011-2381) [SECURITY] Request email headers for attachment containing newline are corrupt

2011-08-04 19:34:39 +00:00

Token.pm

Bug 477513: md5_hex() fails if a saved search has UTF8 characters in it - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-02-09 19:20:40 +00:00

Update.pm

2nd attempt to fix bug 414726: Bugzilla::Update never updates bugzilla-update.xml if the file already exists locally - Patch by me r=mkanat

2008-05-02 19:17:01 +00:00

User.pm

Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account

2011-12-28 22:21:31 +00:00

Util.pm

Bug 714472: (CVE-2012-0448) [SECURITY] utf8 homoglyphs are allowed in email addresses, which could allow an attacker to be CC'ed to private bugs by accident

2012-01-31 16:08:48 +00:00

Version.pm

…

WebService.pm

Bug 494427: Instead of sending <nil> for undef elements in the WebService, just strip the items from the return value.

2009-07-04 12:06:59 +00:00