Bug 340538: Insecure dependency in exec while running with -T switch at /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm line 16.
Patch by Marc Schumann <wurblzap@gmail.com>,
r=LpSolit, a=myk

Bug 281181: [SECURITY] It's way too easy to delete versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 87795: Creating an account should send token and wait for confirmation (prevent user account abuse) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=bkor a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 282121: Remove globals.pl from scripts that no longer use it - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Spelling in code comments patch: 'methids' -> 'methods'; patch by Vlad Dascalu <vladd@bugzilla.org>.

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 332598: Move ValidatePassword() and DBNameToIdAndCheck() from globals.pl into User.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 312157: Remove $::template and $::vars from globals.pl - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 312307: Misused Throw*Error tags in code and templates - Patch by Dennis Melentyev <dennis.melentyev@infopulse.com.ua> r=LpSolit a=justdave

Bug 303697: Eliminate deprecated Bugzilla::DB routines from token.cgi - Patch by Teemu Mannermaa <wicked@etlicon.fi> r=LpSolit a=justdave

Patch by Joel Peshkin <bugreport@peshkin.net>
r=mkanat, a=justdave

Bug 304653: remove 'use Bugzilla::Error' from Util.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 301453: Move CheckEmailSyntax out of CGI.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=mkanat,a=myk

Patch by Max Kanat-Alexander <mkanat@kerio.com>  r=vladd  a=justdave

Patch by Max Kanat-Alexander <mkanat@kerio.com>   r=vladd  a=justdave

patch by erik
r=joel, kiko
a=myk

quietly_check_login()/confirm_login() calls.  Cleans up callsites
(consisting of most of our CGIs), swapping (where appropriate) for calls
to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>.
r=bbaetz, kiko. a=justdave.

Consolidates the logout code into Bugzilla::Auth::CGI, and provides
simple front-end wrappers in Bugzilla.pm for use in the CGIs we have.
r=bbaetz, joel; a=justdave.

Adds a set of constants to the logout() API which allow specifying "how
much" we should log out -- all sessions, the current session, or all
sessions but the current one.

Fixes callsites to use this new API; cleans and documents things a
bit while we're at it. Part I in the great COOKIE apocalypse.

r=kiko a=justdave

r= gerv, a= justdave

Bug 192516: Moving the loose .pm files into the Bugzilla directory, where they belong.  These files pre-date the Bugzilla directory, and would have gone there had it existed at the time.  The four files in question were copied on the CVS server to preserve CVS history in the files.  This checkin deletes them from the old location and modifies everything else to know where they are now.
r= myk, gerv
a= justdave

Patch for bug 234876; removes %FORM from token.cgi; patch by Teemu Mannermaa <wicked@etlicon.fi>; r=kiko, a=justdave.

patch by Vlad Dascalu <jocuri@softhome.net>
r= kiko, a= justdave

r,a=justdave

r=myk,jake

r=joel, a=justdave

r=gerv
a=justdave

r=justdave
a=justdave

patch by joel
r=gerv, a=justdave

Bug 164038 - token.cgi: Cancel token messages should be moved into the templates. Patch by burnus; r=gerv.

r=bbaetz, gerv

r=joel x2