3.2 : changes from revision 6417

To get this branch, use:

bzr branch
/bugzilla/3.2

From Revision 6417 to 6398

expand all

Rev	Summary	Authors	Tags	Date	Diff	Files
6417	Bump the version number post-release. Bump the version number post-release.	Max Kanat-Alexander		2011-01-24
6416	Bump the version number for 3.2.10. Bump the version number for 3.2.10.	Max Kanat-Alexander	bugzilla-3.4.10, bugzilla-stable	2011-01-24
6415	Bug 619594: (CVE-2010-4568) [SECURITY] Improve the randomnes... Bug 619594: (CVE-2010-4568) [SECURITY] Improve the randomness of generate_random_password, to protect against an account compromise issue and other critical vulnerabilities. r=LpSolit, a=LpSolit	Max Kanat-Alexander		2011-01-24
6414	Local change snuck in for Bugzilla/Install/LocalConfig.pm...... Local change snuck in for Bugzilla/Install/LocalConfig.pm...backing out.	David Lawrence		2011-01-24
6413	Bug 621105 - [SECURITY] Voting lacks CSRF protection Bug 621105 - [SECURITY] Voting lacks CSRF protection r=mkanat,a=LpSolit	David Lawrence		2011-01-24
6412	Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that di... Bug 619588: (CVE-2010-4567) [SECURITY] Safety checks that disallow clicking for javascript: or data: URLs in the URL field can be evaded with prefixed whitespace and Bug 628034: (CVE-2011-0048) [SECURITY] For not-logged-in users, the URL field doesn't safeguard against javascript: or data: URLs r=dkl a=LpSolit	Frédéric Buclin		2011-01-24
6411	Bug 621572: (CVE-2010-4572) [SECURITY] chart.cgi vulnerable ... Bug 621572: (CVE-2010-4572) [SECURITY] chart.cgi vulnerable to header-injection due to use of \|print "Location:"\| instead of $cgi->redirect [r=mkanat a=LpSolit]	Reed Loden		2011-01-24
6410	Bug 621110: [SECURITY] Quips (adding/approving/deleting) lac... Bug 621110: [SECURITY] Quips (adding/approving/deleting) lacks CSRF protection r=dkl a=LpSolit	Frédéric Buclin		2011-01-24
6409	Bug 621108: [SECURITY] Creating/editing charts lacks CSRF pr... Bug 621108: [SECURITY] Creating/editing charts lacks CSRF protection r=dkl a=LpSolit	Frédéric Buclin		2011-01-24
6408	Bug 627931 - Release Notes for Bugzilla 3.2.10 Bug 627931 - Release Notes for Bugzilla 3.2.10 r=LpSolit	Max Kanat-Alexander		2011-01-23
6407	Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required... Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required version of CGI.pm to v3.51 in order to address header injection vulnerability. [r=mkanat a=mkanat]	Reed Loden		2011-01-21
6406	Bug 416784: In PostgreSQL 8.1 and newer, createuser takes th... Bug 416784: In PostgreSQL 8.1 and newer, createuser takes the argument -R instead of -A r=manu a=LpSolit	Frédéric Buclin		2010-11-27
6405	Bug 591165: (CVE-2010-2761) [SECURITY] Add CGI.pm v3.50 as a... Bug 591165: (CVE-2010-2761) [SECURITY] Add CGI.pm v3.50 as an optional module in order to address header injection vulnerability. [r=mkanat a=mkanat]	Reed Loden		2010-11-10
6404	Bump the version number post-release. Bump the version number post-release.	Max Kanat-Alexander		2010-11-02
6403	Bump the version number for 3.2.9. Bump the version number for 3.2.9.	Max Kanat-Alexander	bugzilla-3.2.9	2010-11-02
6402	Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header inject... Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary r=mkanat a=LpSolit	Byron Jones		2010-11-02
6401	Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not pr... Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/ r=wurblzap a=LpSolit	Frédéric Buclin		2010-11-02
6400	Bug 608645: Release Notes for Bugzilla 3.2.9 Bug 608645: Release Notes for Bugzilla 3.2.9 r=LpSolit, a=LpSolit	Max Kanat-Alexander		2010-10-31
6399	Bug 589547: Wrong description for editing a flag Bug 589547: Wrong description for editing a flag r/a=LpSolit	A. Shimono (himorin)		2010-09-18
6398	Bug 589525: fix typo Bug 589525: fix typo r/a=LpSolit	A. Shimono (himorin)		2010-09-18

Older

Loggerhead 1.18.1 is a web-based interface for Bazaar branches