1191882 - (bz-release-501) Release Bugzilla 5.0.1, 4.4.10 and 4.2.15

Status: RESOLVED FIXED

(Bugzilla :: Bugzilla-General, defect)

Description

[Frédéric Buclin]

In the last few days, we fixed an interesting list of annoying bugs affecting 5.0:

- bug 1179160: Bugzilla installations using LDAP cannot log in users anymore if the login name is not an email address.
- bug 1183398: if a mandatory custom field is hidden, it's not possible to commit changes.
- bug 1186700: PostgreSQL crashes when Bugzilla::Mailer tries to store bugmails into the mail_staging DB table.
- bug 1181649: clicking the calendar icons (date picker) in the "Time Summary" page doesn't work.
- bug 1183227: if Test::Taint is not installed or is too old, the UI to tag comments is displayed, you can tag comments, but tags are not persistent (they are lost on page reload).

There are a few other minor fixes too.

There have been *a lot* of requests for help in the support mailing-list and on IRC and in dupes for the first two bugs listed above. Also, PostgreSQL crashing is pretty bad. So this is IMO enough to release 5.0.1 asap.

There are no security bugs around, so no need to also release 4.x.

Comment 1

[Frédéric Buclin]

(In reply to Frédéric Buclin from comment #0)
> There are no security bugs around, so no need to also release 4.x.

Actually, there is a new security bug around (bug 1191937), but this one affects 5.0 only.

Comment 2

[Frédéric Buclin]

A critical security bug has been found meanwhile, affecting all branches. :(

Comment 3

[David Lawrence [:dkl]]

Attachment: 1191882_website_1.patch

Comment 4

[David Lawrence [:dkl]]

Attachment: release_announcement_501.txt

Comment 5

[Frédéric Buclin]

Comment on attachment 8658930 [details]
release_announcement_501.txt

r=LpSolit

Comment 6

[Frédéric Buclin]

Comment on attachment 8658928 [details] [diff] [review]
1191882_website_1.patch

>+++ b/lib/releases-list.txt

>+5.0.1	2015/08/10	current
>+4.4.10	2015/08/10	old
>+4.2.15	2015/08/10	old

The date should be 2015/09/10.



>+++ b/src/index.html

>+   <li><a href="news/#release501">Release Bugzilla 5.0.1, 4.4.10 and 4.2.15</a>

Release *of* Bugzilla ...



>+++ b/src/news/index.html

>+  <p><a href="../releases/4.4.10/">Bugzilla 4.4.10</a>is a security and bug fix update for the 4.4 branch:</p>

Missing whitespace after </a>.



>+++ b/src/releases/4.2.15/release-notes.html

>+<h1>Bugzilla 4.2.15 Release Notes</h1>
>+
>+
>+<strong>Notice:</strong> Due to a recent <a href="http://bugzillaupdate.wordpress.com/2014/08/27/landfill-bugzilla-org-disclosure/">data disclosure</a> all current passwords have been reset and will require a new password to be set the next time this site is accessed. To do so, click the "Forgot Password" link at the top.
>+
>+<h1>Bugzilla 4.2 Release Notes</h1>

The title is duplicated (the 4.2 one must go away) and the notice must be removed too.



>+++ b/src/releases/5.0.1/index.html

>+  <li><a href="release-notes.html#v50_feat">New 
>+        Features in Bugzilla 5.0</a></li>

The URL must end with #feat instead of #v50_feat (we removed the version from the URL to make our life easier).



>+++ b/src/releases/5.0.1/release-notes.html

>+<h1>Bugzilla 5.0.1 Release Notes</h1>
>+
>+<strong>Notice:</strong> Due to a recent <a href="http://bugzillaupdate.wordpress.com/2014/08/27/landfill-bugzilla-org-disclosure/">data disclosure</a> all current passwords have been reset and will require a new password to be set the next time this site is accessed. To do so, click the "Forgot Password" link at the top.
>+
>+<h1>Bugzilla 5.0 Release Notes</h1>

Duplicated title and the notice must go away.



>+++ b/src/security/4.2.14/index.html

Shouldn't a link pointing to this security advisory be added to the "Security Advisories" page?


Otherwise looks good. r=LpSolit with these fixes.

Comment 7

[David Lawrence [:dkl]]

Sec bugs committed.

Bumping versions:

To ssh://[e-mail]/bugzilla/bugzilla.git
   10b1fef..2c5f3a7  4.2 -> 4.2

To ssh://[e-mail]/bugzilla/bugzilla.git
   be1be8c..ca4b787  4.4 -> 4.4

To ssh://[e-mail]/bugzilla/bugzilla.git
   69386c5..8ad34ad  5.0 -> 5.0

Comment 8

[David Lawrence [:dkl]]

Tags added in Bzr and Git

Git stable branches updated

To ssh://[e-mail]/bugzilla/bugzilla.git
   d4bcb5a..2c5f3a7  release-4.2-stable -> release-4.2-stable
To ssh://[e-mail]/bugzilla/bugzilla.git
   e9eb3cf..ca4b787  release-4.4-stable -> release-4.4-stable
To ssh://[e-mail]/bugzilla/bugzilla.git
   00b1ca6..8ad34ad  release-5.0-stable -> release-5.0-stable

Comment 9

[David Lawrence [:dkl]]

Tar files and diffs pushed to stage.mozilla.org/

LATEST and STABLE symlinks updated.

Website changes committed:

To ssh://[e-mail]/www/bugzilla.org.git
   85ab3c5..02a7585  master -> master

Comment 10

[David Lawrence [:dkl]]

Email announcements sent.

bugzilla-update.xml updated

bugzillaupdate.wordpress.com updated

Once git.mozilla.org is back up I will bump the versions post-release. justdave is going to update facebook and twitter.

Closing.

Comment 11

[Gervase Markham [:gerv]]

Thanks, dkl, justdave and LpSolit :-)

Gerv