Patch by Olav Vitters <olav@bkor.dhs.org> r=LpSolit a=myk

Bug 356328: $rankdir should be validated in showdependencygraph.cgi - Patch by Frédéric Buclin <LpSolit@gmail.com> r=bkor a=myk

Bug 135812: Add a 'mailfrom' parameter to unify bugmail originating address - Patch by Cedric Caron <cedric.caron@citycable.ch> r=LpSolit a=myk

Bug 357429: Renaming a group which plays a special role generates a SQL error

Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Bug 340538: Insecure dependency in exec while running with -T switch at /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm line 16.
Patch by Marc Schumann <wurblzap@gmail.com>,
r=LpSolit, a=myk

Patch by Olav Vitters <olav@bkor.dhs.org> r=LpSolit a=myk

Bug 357396: Mass-change broken due to the undesired onClick="document.location='show_bug.cgi?id=XXX'" - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=myk

Bug 330290: Edit users should include user's real name and address in title - Patch by timeless <timeless@bemail.org> r=LpSolit a=justdave

Bug 311237: bug_status_help and resolution_help Search popup help should use Abug and abug vars in variables.none.tmpl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=myk

Bug 355888: Add the 'alt' attribute to checkboxes in the 'Saved Searches' panel - Patch by Frédéric Buclin <LpSolit@gmail.com> r=Colin a=justdave

Patch by Olav Vitters <olav@bkor.dhs.org> r+a=justdave

Bug 312876: Make new products non-selectable until they have components - Patch by victory(_RSZ_) <bmo2007@rsz.jp> r=wurblzap a=myk

Patch by Marc Schumann <wurblzap@gmail.com>;
r=myk, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> (module owner) a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=bkor, a=myk

Patch By Olav Vitters <olav@bkor.dhs.org> r=timeless a=myk

Patch By Olav Vitters <olav@bkor.dhs.org> r=mkanat a=justdave

Bug 281181: [SECURITY] It's way too easy to delete versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when "doall" is set - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave

Bug 346086: [SECURITY] attachment.cgi lets you view descriptions of private attachments even when you are not in the insidergroup - Patch by Frédéric Buclin <LpSolit@gmail.com> r=myk a=justdave

Bug 330555: [SECURITY] H1, H2 and H3 are not filtered in global/header.html.tmpl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Bug 356393: No title is displayed when confirming a bug by popular votes - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 356336: Crash when calling showdependencytree.cgi with no bug ID - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 356256: Missing word 'are' in email notification - Patch by victory(_RSZ_) <bmo2007@rsz.jp> r=mkanat a=justdave

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=LpSolit; a=justdave

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=mkanat

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=wurblzap

Bug 355841: Bug::check_can_change_field() incorrectly updates $PrivilegesRequired - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 355833: Groups are out of order when sharing queries - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave