Bug 591165: (CVE-2010-2761) [SECURITY] Bump minimum required version of CGI.pm to v3.50 in order to address header injection vulnerability.
[r=mkanat a=mkanat]

r=LpSolit r=mkanat a=mkanat

r/a=mkanat

r=mkanat a=LpSolit

r/a=mkanat

Bug 474766: The [details] string is duplicated when replying to a comment containing a link to an attachment
r/a=mkanat

Bug 607909: Hours worked / work_time is marked as changing when commenting even when you don't enter a value
r/a=LpSolit

fixed certain work_time tests in xt/search.t.

timestamp is identical to the timestamp passed in to update().

https://bugzilla.mozilla.org/show_bug.cgi?id=590334

creation of databases on other systems. This restores the original
behavior while still retaining the correct error-throwing behavior
for systems that can't create a SQLite database.

https://bugzilla.mozilla.org/show_bug.cgi?id=337776

Bug 600464: (CVE-2010-3172) [SECURITY] Content/Header injection due to non-random multipart/x-mixed-replace boundary
r=mkanat a=LpSolit

Bug 419014: (CVE-2010-3764) [SECURITY] Old charts are not project specific, and product names are viewable in graphs/
r=wurblzap a=LpSolit

r=pyrzak a=LpSolit

r=wicked a=mkanat

r=LpSolit, a=mkanat

is required
r=LpSolit, a=mkanat

a=LpSolit (module owner)

Bug 600516: The "Content Type" and "Flags" sections are not displayed when trying to add attachments on an existing bug and the user previously clicked "Hide Advanced Fields" in enter_bug.cgi
a=LpSolit (module owner)

when generating SQL.
r=glob, a=mkanat

r=gerv a=LpSolit

Bug 585802: Change the cc/user autocomplete (and backend) usermatching to ignore spaces / search on space separated names
r/a=mkanat

Bug 607716: The attachment content is pasted into a comment when editing an attachment with JS disabled
r=LpSolit r=mkanat a=LpSolit

r=LpSolit, a=mkanat

r=timello, a=mkanat

r=Wurblzap, a=LpSolit

it from the release notes.

r=glob, a=mkanat

r=mkanat, a=mkanat

you specify an invalid CPAN module.
r=mkanat, a=mkanat (module owner)

a=LpSolit

r=pyrzak a=LpSolit

[r=LpSolit a=LpSolit]

r/a=mkanat

r/a=LpSolit

one if we're upgrading from a version of Bugzilla before 4.0, and we
figure this out now by checking the existence of bugs_activity.comment_id.
r=LpSolit, a=mkanat

r=LpSolit, a=mkanat

include an HTML comment describing the exact violation that occurred, so
that screen-scrapers can know what violation they hit.
r=mkanat, a=mkanat

the "comment order" preference is set to "newest to oldest with description
at top"
r=mkanat, a=mkanat

and is_reporter_accessible in the WebService.
r=timello, a=mkanat

a=LpSolit