aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'upstream', takes 4.4.6 fixesgentoo-4.4.6Robin H. Johnson2014-10-0637-112/+415
|\
| * Merge tag 'bugzilla-4.4.6' into upstreamRobin H. Johnson2014-10-0631-112/+185
| |\
| | * Bump version to 4.4.6release-4.4.6bugzilla-4.4.6David Lawrence2014-10-062-3/+3
| | * Bug 1054702: CSV export vulnerable to formulae injectionSimon Green2014-10-062-4/+8
| | * Bug 1064140: [SECURITY] Private comments can be shown to flagmail recipients ...Simon Green2014-10-063-18/+38
| | * Bug 1074980: Forbid the { foo => $cgi->param() } syntax to prevent data overrideFrédéric Buclin2014-10-061-1/+32
| | * Bug 1075578: [SECURITY] Improper filtering of CGI argumentsFrédéric Buclin2014-10-0610-44/+45
| | * Bug 1072490: Release notes for 4.4.6David Lawrence2014-10-061-0/+6
| | * Bug 1069760 - Cannot use 'component' in a templateSimon Green2014-10-013-18/+18
| | * Fix bustage due to bug 1061247Frédéric Buclin2014-10-011-0/+1
| | * Bug 1061247 - Successfully using a password change token should invalidate al...Reed Loden2014-09-301-0/+2
| | * Bug 1070317 - Bugzilla::Flag's attribute modification_date is affected by the...Dylan William Hardison2014-09-301-2/+3
| | * Bug 1069363: "show user list again" link does not include is_enabled for show...David Lawrence2014-09-221-1/+3
| | * Bug 252555: Remove the ANSI mode when running MySQLVishant Gautam2014-09-151-3/+4
| | * Bug 1036242: "TypeError: bug_status is undefined" when creating a bugMatt Tyson2014-09-101-4/+8
| | * Bug 1046213: datetime_from() generates wrong dates if year < 1901Frédéric Buclin2014-09-081-3/+7
| | * Bug 768892 - Specific Search without search words yields invalid_column_name ...Simon Green2014-09-081-1/+1
| | * Bug 1040728 - testserver.pl on Ubuntu 12.04 with Apache2 invalidly gives erro...Dylan William Hardison2014-09-031-1/+1
| | * Bug 1008766 - Fix typo in documentationSimon Green2014-08-241-1/+1
| | * Bug 1053802: Groups used for the comment_taggers_group and debug_group parame...Frédéric Buclin2014-08-193-5/+3
| | * Bug 1046145: It is no longer possible to cancel an email address change when ...Frédéric Buclin2014-08-061-1/+1
| | * Bump version post-releaseDavid Lawrence2014-07-242-4/+2
| * | Merge tag 'bugzilla-4.4.5' into upstreamRobin H. Johnson2014-10-0619-95/+296
| |\|
| | * Bump version to 4.4.5 (corrected)release-4.4.5bugzilla-4.4.5David Lawrence2014-07-242-0/+2
| | * Bug 1036213 - (CVE-2014-1546) add '/**/' before jsonrpc.cgi callback to avoid...Simon Green2014-07-241-2/+3
| | * Bump version to 4.4.5David Lawrence2014-07-242-3/+3
| | * Bug 1042087 - Release notes for 4.4.5David Lawrence2014-07-241-0/+6
| | * Bug 1024987 - contrib/bz_webservice_demo.pl fails after User Token login updaterojanu2014-06-171-53/+42
| | * Bug 653597 - Reports with "Real Name" fields use foo_real_name in the url par...Simon Green2014-06-172-6/+32
| | * Bug 978146: activity entry when setting flags isn't split across multiple rowsByron Jones2014-06-114-21/+16
| | * Bug 1009017: users are unable to log in if their password needs to beByron Jones2014-05-201-1/+3
| | * Bug 1011250 - Updates IRC notification text to include commit message and als...David Lawrence2014-05-151-4/+9
| | * Bug 983275 - Switch Bugzilla's CI testing from Tinderbox to travis-ciDavid Lawrence2014-05-151-1/+1
| | * Bug 983275 - Switch Bugzilla's CI testing from Tinderbox to travis-ciDavid Lawrence2014-05-141-1/+1
| | * Bug 1006288: add File::Slurp to the list of optional modulesByron Jones2014-05-141-0/+6
| | * Backed out Bug 1001462 - Bug.search causes error when using simple token auth...David Lawrence2014-05-122-11/+19
| | * Bug 1003852: Digest::SHA 5.82 and newer always croak on wide characters, prev...Frédéric Buclin2014-05-121-5/+5
| | * Bug 1001462 - Bug.search causes error when using simple token auth and specif...David Lawrence2014-05-122-19/+11
| | * Bug 983275 - Switch Bugzilla's CI testing from Tinderbox to travis-ciDavid Lawrence2014-05-081-0/+6
| | * Bug 983275 - Switch Bugzilla's CI testing from Tinderbox to travis-ciDavid Lawrence2014-05-071-7/+5
| | * Bug 999331: searching attachment data is very slow due to an unboundedByron Jones2014-05-051-0/+7
| | * Bug 995209 - Create a Build.PL script using Module::Build for testing/instal...David Lawrence2014-05-021-1/+1
| | * Bug 983275 - Switch Bugzilla's CI testing from Tinderbox to travis-ciDavid Lawrence2014-05-021-1/+1
| | * Bug 983275 - Switch Bugzilla's CI testing from Tinderbox to travis-ciDavid Lawrence2014-05-021-0/+39
| | * Bug 999296: Make checksetup.pl not complain about having added newDave Miller2014-05-011-2/+8
| | * Bug 995209 - Create a Build.PL script using Module::Build for testing/install...David Lawrence2014-05-012-0/+114
| | * Bug 1001846: When editing cc_accessible using Bug.update, the method should a...Frédéric Buclin2014-04-291-1/+0
| | * Bug 1001497: User.login incorrectly returns id = 0 when the login or password...Frédéric Buclin2014-04-251-1/+1
| | * Bumped version post-releaseDavid Lawrence2014-04-212-2/+2
| * | Merge tag 'bugzilla-4.4.4' into upstreamRobin H. Johnson2014-10-067-17/+89
| |\|