Bug 292544: [SECURITY] Can see a security-sensitive bug in buglist.cgi for a short time when there are certain performance problems
Patch By Frederic Buclin <LpSolit@gmail.com> r=joel, a=justdave

Bug 293159: [SECURITY] Anyone can change flags and access bug summaries due to a bad check in Flag::validate() and Flag::modify()
Patch By Frederic Buclin <LpSolit@gmail.com> r=myk, a=justdave

Patch By byron jones (glob) <bugzilla@glob.com.au> r=myk, a=justdave

Patch By A. Karl Kornel <karl@kornel.name> r=glob, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=colin

Patch By Marc Schumann <wurblzap@gmail.com> r=glob, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=glob, r=dkl, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch by Byron Jones <bugzilla@glob.com.au> r=mkanat,a=justdave

Bug 216028: User::match_field() displays no warning when the maximum number of matches is reached - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Bug 297974: Add bug numbers to the generated RSS buglist - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Bug 299212: "already locked" errors should be more informative - Patch by Frédéric Buclin <LpSolit@gmail.com> r=glob a=justdave

Bug 289580: Templatize the 'confirm delete' bit of editproducts.cgi - Patch by Tiago R. Mello <timello@async.com.br> r=LpSolit a=justdave

Bug 295530: Footer bug-search form should be "bug # ____ [Find]" for UI consistency - Patch by Adam Guthrie <ispiked@gmail.com> r=mkanat a=myk

Bug 298508 + bug 298510: Many uninitialized value errors in editwhines involving length function + Numeric comparison performed on strings - Both patches by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave

Bug 298507: several uninitialized values used in editwhines.cgi - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave

Bug 240251: Bug::AppendComment() should receive the user ID as a 2nd parameter - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 299211: whine.pl fails if derive_groups is required - Patch by Marc Schumann <wurblzap@gmail.com> r=LpSolit a=justdave

Bug 242318: "blocked" field is ignored in post_bug.cgi if the "dependson" field isn't present - Patch by Frédéric Buclin <LpSolit@gmail.com> r=kiko a=justdave

Bug 223570: Creating a bug in a product with no versions results in internal error - Patch by A. Karl Kornel <karl@kornel.name> r=LpSolit a=justdave

Bug 268146: mod_security complain: Invalid cookie format: Cookie value is missing #2 - Patch by Marc Schumann <wurblzap@gmail.com> r=kiko a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, r=joel, a=justdave

Bug 274404 - Document the new whining functionality that will be available in 2.20. Patch by A. Karl Kornel <karl@kornel.name> r=colin (carrying forward joel's content r)

Back out bug 274404 which for some reason fails to build using jade but will build correctly with xmlto, pending investigation.

Patch by A. Karl Kornel <karl@kornel.name>
r=colin,joel

Patch by Byron Jones <bugzilla@glob.com.au> r=LpSolit,a=justdave

references to runtests.sh in docs, checksetup.pl, and other fine
places.

r=LpSolit, a=my snapple peach iced tea

Bug 298024: Incorrect group control check in sanitycheck.cgi - Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel a=myk

Bug 202278: Quips are escaped now, no need for HTML-like blocking - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=myk

Patch by me, r=mkanat

Patch by me, r=mkanat

Patch by Frank Wein <bugzilla@mcsmurf.de>, r=me

Bug 298190: The "200 bugs" limit in buglist.cgi should be a constant, not a magic number - Patch by Tiago R. Mello <timello@async.com.br> r=kiko,justdave a=justdave

Bug 277454: Bugs in inactivated groups don't show padlocks on the buglist - Patch by Marc Schumann <wurblzap@gmail.com> r=LpSolit a=justdave

Bug 284273: Move productResponsibilities from editusers.cgi to Bugzilla::User.pm - Patch by Marc Schumann <wurblzap@gmail.com> r=mkanat a=justdave