Mozilla

Bug 637981: (CVE-2011-2379) [SECURITY] "Raw Unified" patch diffs can cause XSS on this domain in IE 6-8 and Safari

2011-08-04 20:49:57 +00:00

Bug 785470: (CVE-2012-3981) [SECURITY] Missing escaping of the username can lead to LDAP injection

2012-08-30 18:33:26 +00:00

Bug 824399: (CVE-2013-0786) [SECURITY] build_subselect() leaks the existence of products and components you cannot access

2013-02-19 17:32:38 +00:00

DB

Bug 746547: SMALLSERIAL is of type INT2, not INT1

2012-04-18 15:04:18 +00:00

Field

Bug 577054: Field::Choice was denying the deletion of any value if

2010-07-23 01:50:54 +00:00

Install

Bug 646578: Make Math::Random::Secure fail to install if its dependencies

2011-04-27 22:22:46 +00:00

Job

Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine

2009-09-10 23:47:27 +00:00

JobQueue

Bug 475403: A RHEL SysV Init Script for jobqueue.pl

2009-09-04 21:22:52 +00:00

Migrate

Bug 519584: Implement a framework for migrating from other bug-trackers, and start with a GNATS importer.

2009-10-24 05:31:42 +00:00

Search

Bug 611623: The alias is not filtered in QuickSearch when passed to show_bug.cgi

2010-11-13 00:20:10 +00:00

Template

Bug 545260: In the code for template hooks, the cached code of a hook

2010-02-17 22:47:48 +00:00

User

Bug 776103 - Syntax error in Bugzilla::User::Setting API doc

2012-07-25 21:46:57 +00:00

WebService

Fix typo

2012-10-13 21:31:56 +00:00

Whine

Bug 530467: Create a read-only Bugzilla::Whine::Query object and have editwhines.cgi use it

2009-12-12 22:15:43 +00:00

Attachment.pm

Bug 802204 (CVE-2012-4197): [SECURITY] Marking an attachment you cannot see as obsolete can disclose its description

2012-11-13 17:31:57 +00:00

Auth.pm

Bug 707594: Fix broken account lockout notifications

2011-12-05 16:48:52 +00:00

Bug.pm

Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when creating or editing a bug

2011-08-04 20:20:54 +00:00

BugMail.pm

Bug 556429: Send bugmail notifications in the Perl code instead of from

2010-04-07 03:31:33 +00:00

CGI.pm

Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary

2010-11-02 23:37:45 +00:00

Chart.pm

Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular and graphical reports in debug mode

2011-12-28 22:03:37 +00:00

Classification.pm

Bug 557324: object_before_delete does not work when object is Bugzilla::Classification

2010-04-07 18:17:32 +00:00

Comment.pm

Bug 552168: Speed up comment display by pre-loading all Bugzilla::User

2010-03-14 00:46:27 +00:00

Component.pm

Bug 553266: config.cgi?ctype=rdf spends most of its time loading flagtypes from the database (partial backport)

2010-10-20 00:50:28 +00:00

Config.pm

Bug 434801: [SECURITY] .htaccess doesn't prevent reading old-params.txt from the web - Patch by Reed Loden <reed@reedloden.com> r=mkanat a=LpSolit

2010-02-01 00:50:15 +00:00

Constants.pm

Bump version post-release

2013-02-20 01:15:38 +00:00

DB.pm

Bug 578494: We can't use "shellwords" to split words for sql_fulltext on Pg,

2010-08-02 01:34:28 +00:00

Error.pm

Bug 554714: Make JSON-RPC throw errors properly even if they are thrown

2010-04-01 01:17:35 +00:00

Extension.pm

Fix some typos and formatting in the Bugzilla::Extension POD.

2010-03-08 01:33:57 +00:00

Field.pm

Bug 557686: PostgreSQL crashes when deleting a custom field of type Date/Time

2010-04-07 01:18:54 +00:00

Flag.pm

Bug 552167: show_bug.cgi loads flagtypes from the database for each attachment

2010-03-30 22:05:25 +00:00

FlagType.pm

Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object

2008-09-17 03:47:36 +00:00

Group.pm

Bug 252005: Allow changing the captialization of a group name

2010-06-22 02:34:17 +00:00

Hook.pm

Bug 596611: Add a hook to email_in.pl

2010-11-04 17:23:45 +00:00

Install.pm

Bug 519858 - Move uncommonly used parameters out of the "Required" section and into a "General" and "Advanced" section

2009-12-31 12:37:51 +00:00

JobQueue.pm

Bug 530270: Whining fails if mail queueing is enabled - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-11-22 22:26:04 +00:00

Keyword.pm

Bug 509045: Make "use_keywords" a global template variable instead of having to pass it to templates all the time

2009-08-11 04:34:22 +00:00

Mailer.pm

Bug 531500: Allow the mailer_before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:46:45 +00:00

Migrate.pm

Fix POD of Bugzilla::Migrate to be consistent with reality (it was slightly

2009-11-17 21:16:08 +00:00

Milestone.pm

…

Object.pm

Fix typo

2012-11-02 13:03:22 +00:00

Product.pm

Bug 556429: Send bugmail notifications in the Perl code instead of from

2010-04-07 03:31:33 +00:00

Search.pm

Bug 490322: Make "allwords" work with the keywords field, again.

2011-02-15 05:48:11 +00:00

Series.pm

Bug 302542: Implement the ability to delete data sets (series) in New Charts - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=gerv a=LpSolit

2009-10-04 21:00:26 +00:00

Status.pm

Bug 512606: Make statuses currently available for the user to change this bug to be controlled by Bugzilla::Bug, not the template

2009-12-12 21:55:15 +00:00

Template.pm

Bug 842038: (CVE-2013-0785) [SECURITY] XSS in show_bug.cgi when using an invalid page format

2013-02-19 17:33:12 +00:00

Token.pm

Bug 527586: Use X-Forwarded-For instead of REMOTE_ADDR for trusted proxies

2009-12-31 12:53:21 +00:00

Update.pm

Fix bustage in 012throwables.t

2010-02-20 21:17:24 +00:00

User.pm

Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account

2011-12-28 22:21:31 +00:00

Util.pm

Bug 728639: (CVE-2012-0465) [SECURITY] User lockout policy can be bypassed by altering the X-FORWARDED-FOR header

2012-04-18 17:06:52 +00:00

Version.pm

Bug 471871: Bugzilla::Version has duplicated code compared to Bugzilla::Object (make Bugzilla::Version really a subclass of Bugzilla::Object) - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-04-10 09:36:46 +00:00

WebService.pm

Bug 550618: Make the XML-RPC WebService return the right date format

2010-03-08 07:47:34 +00:00