Patch by Marc Schumann <wurblzap@gmail.com>;
r=myk, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin, r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=ghendricks, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> (module owner) a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=bkor, a=myk

Patch By Olav Vitters <olav@bkor.dhs.org> r=timeless a=myk

Patch By Olav Vitters <olav@bkor.dhs.org> r=mkanat a=justdave

Bug 281181: [SECURITY] It's way too easy to delete versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 346564: [SECURITY] timetracking deadline leaks in XML - Patch by Olav Vitters <bugzilla-mozilla@bkor.dhs.org> r=LpSolit a=justdave

Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when "doall" is set - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave

Bug 346086: [SECURITY] attachment.cgi lets you view descriptions of private attachments even when you are not in the insidergroup - Patch by Frédéric Buclin <LpSolit@gmail.com> r=myk a=justdave

Bug 330555: [SECURITY] H1, H2 and H3 are not filtered in global/header.html.tmpl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave

Bug 356393: No title is displayed when confirming a bug by popular votes - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 356336: Crash when calling showdependencytree.cgi with no bug ID - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 356256: Missing word 'are' in email notification - Patch by victory(_RSZ_) <bmo2007@rsz.jp> r=mkanat a=justdave

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=LpSolit; a=justdave

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=mkanat

Patch by Colin Ogilvie <colin.ogilvie@gmail.com>; r=wurblzap

Bug 355841: Bug::check_can_change_field() incorrectly updates $PrivilegesRequired - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave

Bug 355833: Groups are out of order when sharing queries - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 355744: Bugs are not added to mandatory groups on bug creation - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=justdave

Patch by Marc Schumann <wurblzap@gmail.com>,
r=LpSolit, a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=Wurblzap, a=myk

Bug 355230: [PostgreSQL] Crash if sharer_id is not an integer - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=myk

updating this.

Bug 355172: [Selenium] <name="newqueryname" ...> needs an ID - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 355158: Bad filtering of bug list names - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

checkin fixes for that bug.

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=wurblzap, a=myk

Bug 354661: Provide a Bugzilla Quicksearch plugin for Firefox 2 and IE 7 users to install - Patch by Frédéric Buclin <LpSolit@gmail.com> r=gavin.sharp r=wurblzap a=myk

Bug 354304: Changing several bugs at once fails if aliases are in use - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk