[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2012Q2 2009-06-14T17:38:38Z 2009-06-14T17:38:38Z joerg joerg 2009-06-14T17:38:38Z urn:sha1:7af33f0780f46bb1a19daa9c6479e75838fa936b 2009-02-03T23:05:28Z adrianp adrianp 2009-02-03T23:05:28Z urn:sha1:f98693fbf1e86d077056279979cd6914bae7ae5e + Saving changes to parameters would sometimes fail silently. Bugzilla will now throw an error instead of failing silently. (bug 347707) Security fixes for: http://www.bugzilla.org/security/2.22.6/ 2008-11-09T20:09:02Z adrianp adrianp 2008-11-09T20:09:02Z urn:sha1:d91d766353df2a2f4bdf31bb2ed1710cfb6f787d Includes a fix for: http://www.bugzilla.org/security/2.20.6/ 2008-05-06T19:36:39Z adrianp adrianp 2008-05-06T19:36:39Z urn:sha1:85dcb6590c63da8a6854dcf3b481419c78d163ae Class: Cross-Site Scripting Versions: 2.17.2 and higher Description: When using the "Format for Printing" view of a bug (or the "Long Format" of a bug list, which is the same thing), there was a cross-site scripting hole--arbitrary text from a particular URL parameter could be injected into the page without filtering. 2007-08-25T09:49:33Z adrianp adrianp 2007-08-25T09:49:33Z urn:sha1:86d4837447fe364cbdd3bcca4d00dbff4e933d50 + Bug lists in iCal format were cutting off bug summaries if they had a comma in them. (bug 274408) + If collectstats.pl encountered an invalid series when collecting data for New Charts, it would stop processing all series, silently. This means that several series may not have been collecting data. On PostgreSQL, all series were failing, thus meaning that New Charts were not working at all on PostgreSQL. (bug 257351) 2007-02-03T17:21:02Z adrianp adrianp 2007-02-03T17:21:02Z urn:sha1:009622b764cac91548a6d9bb41c731f72ff97458 + Make Bugzilla compatible with Template Toolkit 2.15 (bug 357374) + Make Bugzilla compatible with versions of MySQL higher than 5.0.25 (bug 321645) + Sanity Check can now only be run by people with the "admin" privilege. (bug 91761) + Security [XSS] fix https://bugzilla.mozilla.org/show_bug.cgi?id=367674 2006-10-15T12:36:05Z adrianp adrianp 2006-10-15T12:36:05Z urn:sha1:801d64d80220e8197f6d41dbb94df5fe98cdeb97 + When sending mail, Bugzilla could throw the error "Insecure dependency in exec while running with -T switch" (bug 340538). + Using the public webdot server (for dependency graphs) should work again (bug 351243). + The "I'm added to or removed from this capacity" email preference wasn't working for new bugs (bug 349852). + The original release of 2.22 incorrectly said it required Template-Toolkit version 2.08. In actual fact, Bugzilla requires version 2.10 (bug 351478). + votes.cgi would crash if your bug was the one confirming a bug (bug 351300). + checksetup.pl now correctly reports if your Template::Plugin::GD module is missing. If missing, it could lead to charts and graphs not working (bug 345389). + The "Keyword" field on buglist.cgi was not sorted alphabetically, so it wasn't very useful for sorting (bug 342828). + Sendmail will no longer complain about there being a newline in the email address, when Bugzilla sends mail (bug 331365). + contrib/bzdbcopy.pl would try to insert an invalid value into the database, unnecessarily (bug 335572). + Deleting a bug now correctly deletes its attachments from the database (bug 339667). 2006-10-15T12:21:13Z adrianp adrianp 2006-10-15T12:21:13Z urn:sha1:b7b663493615710bb368b8fb9857f91acc9cc881 New features include: * Complete PostgreSQL Support * Parameters In Sections * One Codebase, Multiple Databases * UTF-8 for New Installations * Admins Can Impersonate Users * Bug Import and Moving Improvements * Adding Individual Bugs to Saved Searches * Attach URLs * Optional "Strict Isolation" for Groups * "editcomponents" Change * "shutdownhtml" Change * Miscellaneous Improvements For further details see: http://www.bugzilla.org/releases/2.22/new-features.html http://www.bugzilla.org/releases/2.22/release-notes.html 2006-06-17T19:03:05Z rillig rillig 2006-06-17T19:03:05Z urn:sha1:379dbf90e6271f3458b572647df993a15f4cf5d2 2006-02-21T16:48:55Z adrianp adrianp 2006-02-21T16:48:55Z urn:sha1:dda1dd648728501fe1feac84dcd953dad8f86bf4 Make pkglint happer This also fixes a number of security issues: http://www.securityfocus.com/archive/1/425584/30/0/threaded > Version 2.20.1 > -------------- > > + Many PostgreSQL fixes, including fixing whine.pl on Pg 8 > (bug 301062) and fixing the --regenerate option of collectstats.pl > for all versions of Pg (bug 316971). However, users who want full > PostgreSQL support are encouraged to use the 2.22 series, as > certain PostgreSQL bugs were discovered that will not be fixed > in 2.20 (their fixes were too complex). > > + In Bugzilla 2.20, the "administrator" user created by checksetup.pl > would not ever be sent email, because their email preferences were > left blank. This has been fixed for 2.20.1. However, if you created > this administrative user with Bugzilla 2.20, make sure to go back > and enable their Email Preferences. (bug 317489) > > + The bzdbcopy.pl script mentioned in these release notes > has now actually been checked-in to the 2.20 branch, and so > it's included in this release. (bug 291776) > > + When there's only one Classification, you now won't be required > to pick a Classification on bug entry. (bug 311489) > > + You can no longer add dependencies on bugs you can't see. > (bug 141593) > > + The CC list is included in "New" bug emails, again. (bug 313661) > > + In the original 2.20, certain scripts were not correctly using > the "shadow database," if it was specified. This has been fixed > in 2.20.1. (bug 313695) > > + "Saved Searches" that were saved before Bugzilla 2.20, would throw > an error if they contained "Days Since Bug Changed." as part of their > criteria. This has been fixed in Bugzilla 2.20.1. (bug 302599) > > + You can now successfully delete a product even when Target Milestones > are turned off. (bug 317025) > > + checksetup.pl now correctly pre-compiles templates for languages other > than English. (bug 304417) > > + The "All Closed" chart that is created by default in New Charts > now actually represents all closed bugs, and not all bugs in the > product. (bug 300473) > > + CSV bug lists with more than 1000 dates now work properly. (bug 257813) > > + Various bugs with upgrading from previous versions of Bugzilla > have been fixed. (bug 307662, bug 311047, bug 310108) > > + Many, many other bug fixes. See http://www.bugzilla.org/status/changes.html > for details on what was fixed between 2.20 and 2.20.1.