Accepted bugzilla 2.18.4-1 (source)
Martin Pitt
martin.pitt at ubuntu.com
Sat Oct 8 11:00:04 CDT 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Origin: Debian/unstable
Format: 1.7
Date: Sat, 08 Oct 2005 16:57:19 +0100
Source: bugzilla
Binary: bugzilla, bugzilla-doc
Architecture: source
Version: 2.18.4-1
Distribution: breezy
Urgency: high
Maintainer: Alexis Sukrieh <sukria at sukria.net>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description:
bugzilla - web-based bug tracking system
Closes: 252076 305360 312925 320004 320005 321567 327041 327063 331206
Changes:
bugzilla (2.18.4-1) unstable; urgency=high
.
* New upstream minor release
+ Fixed a security issue: It was possible to bypass the "user
visibility groups" restrictions if user-matching was turned on
in "substring" mode.
+ Fixed a security issue: config.cgi exposed information to users who
weren't logged in, even when "requirelogin" was turned on in Bugzilla.
(closes: #331206)
.
bugzilla (2.18.3-2) unstable; urgency=low
.
* Postinst script now uses temporary files in an safe way, with mktemp
rather than using a non-changing path. Thanks to Javier
Fernández-Sanguino Peña.
(closes: #321567)
* Added a RewriteRule in the virtual hosts examples for correctly handling
the %urlbase% tokens in the templates. Thanks to Yann Dirson.
(closes: #252076)
* showdependencygraph should not require a 64x64 inches, patch added in
debian/patches. Thanks to Yann Dirson.
(closes: #305360)
* Updated the cron.daily script so that extra sites are processed
(/etc/bugzilla/sites/*). Thanks to Yann Dirson.
(closes: #320004)
* Updated the Makefile and added a new patch for enabling a correct path to
the DTD file. Thanks to Yann Dirson.
(closes: #327063)
* Filling empty values for MySQL username and password is not allowed.
(closes: #312925)
* Updated and cleaned the changelog file for correct utf8 encoding.
(closes: #327041)
* Updated the README.Debian file for giving more informations on how to
upgrade all the BUGZILLA_SITE's located in /etc/bugzilla/sites. Thanks to
Yann Dirson.
(closes: #320005)
Files:
de9aaf36e4604b9c9a1db628d0b9a120 668 web optional bugzilla_2.18.4-1.dsc
b181cef2ed8bbc7bc277c5fa7ebebbe7 1640300 web optional bugzilla_2.18.4.orig.tar.gz
f34f7bc99646c8d60c9df4aba72c28d4 69174 web optional bugzilla_2.18.4-1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iQEVAwUBQ0fsXwF4adwMEr3XAQKvtAf/WoTCdzVW5tN9k53sqN7XbT8q/Hq2v6V9
0eN+z5pAijTKtXEn6zdIWc7GpoAsjx4Ge/MbLUm19aFhqmmG3qKz0LimzIUwa1rl
B0vkTTz2UaJyRwOjTPSW/CteAQ3KJ+KWvAO2HPS/xcquAnENDe3VVOElbiSJpFSw
AzRq4ALad7dDX7mLv5r5rMFE9Ah9cCE0yNcafWX3WzWwUMZNqnjLbGR4HoWAautu
Gh28bagmCFxwRdO8xIYXZErTNFSXEPBXT6aa3O1G5t79i/rLuespGarbcoEy1KCc
oobTAzFiwuwucd/AkBFjr9DDQlueaTS5mwkUqAfDQ2keZGrw+Xu3kw==
=6XWj
-----END PGP SIGNATURE-----
Accepted:
bugzilla_2.18.4-1.diff.gz
to pool/universe/b/bugzilla/bugzilla_2.18.4-1.diff.gz
bugzilla_2.18.4-1.dsc
to pool/universe/b/bugzilla/bugzilla_2.18.4-1.dsc
bugzilla_2.18.4.orig.tar.gz
to pool/universe/b/bugzilla/bugzilla_2.18.4.orig.tar.gz
More information about the breezy-changes
mailing list