mkanat%bugzilla.org b661633eaf Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required version of CGI.pm to v3.51 in order to address header injection vulnerability. ...

[r=mkanat a=mkanat]


git-svn-id: svn://10.0.0.236/branches/BUGZILLA-3_4-BRANCH@261784 18797224-902f-48f8-a5cc-f745e15eee43

2011-01-21 21:22:55 +00:00

..

Attachment

Bug 441921: context=file fails due to taint issues in file names and file rev numbers - Patch by Frédéric Buclin <LpSolit@gmail.com> r=himorin a=LpSolit

2008-06-29 17:38:03 +00:00

Auth

Bug 385606: Logincookies are recreated at each HTTP request when using the 'Env' auth method - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-12-31 12:18:06 +00:00

Config

Bug 482584: Add a parameter to hide the "See Also" field

2009-04-17 22:30:33 +00:00

DB

Bug 538705: Prevent database connections from timing out during long

2010-03-17 08:46:41 +00:00

Field

Bug 504944: Use of uninitialized value in hash element at Bugzilla/Field/Choice.pm line 253 - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

2009-07-23 21:35:59 +00:00

Install

Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required version of CGI.pm to v3.51 in order to address header injection vulnerability.

2011-01-21 21:22:55 +00:00

Job

Bug 515606: Fix the arguments of Bugzilla::Job::Mailer->retry_delay--it's actually a class method, not just a subroutine

2009-09-10 23:47:27 +00:00

JobQueue

Bug 475403: A RHEL SysV Init Script for jobqueue.pl

2009-09-04 21:22:52 +00:00

Search

Bug 490562: QuickSearch "+" operator adds $qsword over and over for @subWords

2009-04-29 00:32:28 +00:00

Template/Plugin

Bug 517793: Use the ENCODING parameter of Template Toolkit instead of having a custom parser object. This also fixes a memory leak on mod_perl.

2009-09-26 23:37:31 +00:00

User

Bug 364161: Inefficient SQL: Selecting subclass from setting table

2008-09-05 23:03:03 +00:00

WebService

Bug 515568: handle_login() doesn't check $@ after eval

2010-02-06 18:16:43 +00:00

Attachment.pm

Bug 399074: Remove the 'maxpatchsize' parameter - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

2008-12-10 18:32:30 +00:00

Auth.pm

Bug 134022: PERFORMANCE: deleting old login cookies locks login checks

2009-01-20 20:10:08 +00:00

Bug.pm

Bug 532493: [SECURITY] Restricting a bug to a group while moving it to another product has no effect if the group is not used by both products - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2010-02-01 00:21:45 +00:00

BugMail.pm

Bug 534587 - "Bugmail uses the timezone of the changee instead of the user receiving the mail" [p=reed r=mkanat a=mkanat]

2010-01-05 07:07:46 +00:00

CGI.pm

Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary

2010-11-02 23:37:45 +00:00

Chart.pm

Bug 389396: Do not list series you cannot plot - Patch by Frédéric Buclin <LpSolit@gmail.com> r=dkl a=LpSolit

2009-08-17 23:01:46 +00:00

Classification.pm

Bug 471866: Classification name length and sortkey max value not validated - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

2009-01-04 23:15:31 +00:00

Component.pm

…

Config.pm

Bug 434801: [SECURITY] .htaccess doesn't prevent reading old-params.txt from the web - Patch by Reed Loden <reed@reedloden.com> r=mkanat a=LpSolit

2010-02-01 00:50:15 +00:00

Constants.pm

Bump the version number post-release.

2010-11-03 01:50:41 +00:00

DB.pm

Bug 508181: UTF-8 table conversion was failing when there were FKs on the column or on related columns

2009-08-06 14:54:22 +00:00

Error.pm

Bug 435507: Provide a method of hooking the WebService error codes

2008-05-27 22:11:56 +00:00

Field.pm

Bug 557686: PostgreSQL crashes when deleting a custom field of type Date/Time

2010-04-07 01:18:54 +00:00

Flag.pm

Fix incorrect regexp for bug 333648 - Patch by me

2009-04-08 20:47:02 +00:00

FlagType.pm

Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object

2008-09-17 03:47:36 +00:00

Group.pm

Bug 505796 - Bugzilla::Group::grant_direct has refers to $self->{members_direct} instead of $self->{grant_direct}

2009-07-22 19:41:52 +00:00

Hook.pm

Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:47:37 +00:00

Install.pm

Bug 405355: Move flatten_group_membership() from User.pm to Group.pm - Patch by arbingersys <arbingersys@gmail.com> r/a=LpSolit

2009-01-25 18:49:31 +00:00

JobQueue.pm

Bug 530270: Whining fails if mail queueing is enabled - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-11-22 22:26:04 +00:00

Keyword.pm

…

Mailer.pm

Bug 531500: Allow the mailer-before_send hook to modify the arguments passed to Email::Send

2009-12-04 14:47:37 +00:00

Milestone.pm

…

Object.pm

Bug 583690: (CVE-2010-2759) [SECURITY][PostgreSQL] Bugzilla crashes when viewing a bug if a comment contains 'bug <num>' or 'attachment <num>' where <num> is greater than the max allowed integer

2010-08-04 22:22:01 +00:00

Product.pm

Bug 577139: (CVE-2010-2758) [SECURITY] request.cgi and duplicates.cgi let you know whether a product exists or not

2010-08-04 22:04:01 +00:00

Search.pm

Bug 417048: (CVE-2010-2756) [SECURITY] Boolean charts let me query for users being in any given group

2010-08-04 21:35:40 +00:00

Series.pm

Bug 389396: Do not list series you cannot plot - Patch by Frédéric Buclin <LpSolit@gmail.com> r=dkl a=LpSolit

2009-08-17 23:01:46 +00:00

Status.pm

Bug 308253: Ability to add select (enum) fields to a bug whose list of values depends on the value of another field

2008-11-07 11:34:57 +00:00

Template.pm

Bug 583690: (CVE-2010-2759) [SECURITY][PostgreSQL] Bugzilla crashes when viewing a bug if a comment contains 'bug <num>' or 'attachment <num>' where <num> is greater than the max allowed integer

2010-08-04 22:22:01 +00:00

Token.pm

Bug 477513: md5_hex() fails if a saved search has UTF8 characters in it - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

2009-02-09 19:20:40 +00:00

Update.pm

2nd attempt to fix bug 414726: Bugzilla::Update never updates bugzilla-update.xml if the file already exists locally - Patch by me r=mkanat

2008-05-02 19:17:01 +00:00

User.pm

Bug 533018: "Confirm match" displays full email address to logged-out users in request.cgi

2010-02-18 00:36:20 +00:00

Util.pm

Bug 515515: For clients, mid-air collision results when user's timezone preference differs from server's

2010-04-02 13:01:43 +00:00

Version.pm

…

WebService.pm

Bug 494427: Instead of sending <nil> for undef elements in the WebService, just strip the items from the return value.

2009-07-04 12:06:59 +00:00