Bug 346086: [SECURITY] attachment.cgi lets you view descriptions of private attachments even when you are not in the insidergroup - Patch by Frédéric Buclin <LpSolit@gmail.com> r=myk a=justdave

Bug 330555: [SECURITY] H1, H2 and H3 are not filtered in global/header.html.tmpl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Bug 356393: No title is displayed when confirming a bug by popular votes - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 356336: Crash when calling showdependencytree.cgi with no bug ID - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 356256: Missing word 'are' in email notification - Patch by victory(_RSZ_) <bmo2007@rsz.jp> r=mkanat a=justdave

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=LpSolit; a=justdave

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=mkanat

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=wurblzap

Bug 355841: Bug::check_can_change_field() incorrectly updates $PrivilegesRequired - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 355833: Groups are out of order when sharing queries - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 355744: Bugs are not added to mandatory groups on bug creation - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=justdave

Patch by Marc Schumann <wurblzap@gmail.com>,
r=LpSolit, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=myk

Bug 355230: [PostgreSQL] Crash if sharer_id is not an integer - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=myk

updating this.

Bug 355172: [Selenium] <name="newqueryname" ...> needs an ID - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 355158: Bad filtering of bug list names - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

checkin fixes for that bug.

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=wurblzap, a=myk

Bug 354661: Provide a Bugzilla Quicksearch plugin for Firefox 2 and IE 7 users to install - Patch by Frédéric Buclin <LpSolit@gmail.com> r=gavin.sharp r=wurblzap a=myk

Bug 354304: Changing several bugs at once fails if aliases are in use - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 354314: Missing "--do_not_change--" option for custom select fields when changing several bugs at once - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 352165: Improve the "Bug Writing Guidelines" - Patch by eli@prometheus-music.com r=gerv, r=timeless a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> (module owner) a=justdave

Bug 353768: "editcomponents" group is not appropriate for editvalues.cgi (Field Values) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 353965: object => "field values" doesn't exist in user-error.html.tmpl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 353796: Rename BugMail::ProcessOneBug() as BugMail::Send() - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 353623: SanityCheck 'rescanallbugmail' parameter not working (no 'changer' specified) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=justdave

Bug 353820: The confirmation page when deleting a user account who has entries in the bugs_activity table fails to notify the administrator correctly - Patch by Frédéric Buclin <LpSolit@gmail.com> r=ghendricks a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, a=justdave

Bug 349852: "I'm added to or removed from this capacity" email pref doesn't work for new bugs - Original patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org>, slightly modified by Frédéric Buclin <LpSolit@gmail.com> r=LpSolit, r=mkanat a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=justdave