346505 - Release Notes For Bugzilla 2.22.1

Status: RESOLVED FIXED

(Bugzilla :: Documentation, defect)

Description

[victory <[e-mail]>]

Comment 1

[Max Kanat-Alexander]

Attachment: v1

Hey justdave. How do these look to you?

Comment 2

[victory <[e-mail]>]

++ When sending mail, Bugzilla could throw the error "Insecure dependency in 
+ exec while running with -T switch at 
+ /usr/lib/perl5/site_perl/5.8.6/Mail/Mailer/sendmail.pm" (bug 340538). 

the path can be different

+Version 2.22.1
+Scripting vulnerabilities that existed in versions of Bugzilla
+prior to 2.20.3. None of them are considered to be of critical
__________^^^^^^
2.22?

Comment 3

[Frédéric Buclin]

Comment on attachment 239865 [details] [diff] [review]
v1

>+This section describes bugs fixed in releases after the original 2.22
>+release.
>+
>+Version 2.22.1
>+--------------


There are two additional bugs that I would like to see mentioned here:

bug 339667: Deleting a bug now correctly deletes its attachments from the DB (they were previously left alone in the DB).
[Note: the reason to mention this is that it could have some security implications: with 2.22, someone could ask you a copy of your DB for some study, and you may first want to delete critical/sensitive bugs, and you wouldn't notice that the corresponding attachments are still there, which is as bad as not deleting the bug itself.]

bug 324784: editgroups.cgi will now prevent you from deleting a group which plays some special role in your installation, such as the chartgroup, insidergroup or timetrackinggroup.


Everything else looks good. r=LpSolit with these two bugs included in the release notes.

Comment 4

[Max Kanat-Alexander]

2.22:

Checking in docs/rel_notes.txt;
/cvsroot/mozilla/webtools/bugzilla/docs/rel_notes.txt,v  <--  rel_notes.txt
new revision: 1.36.2.5; previous revision: 1.36.2.4
done

tip:

Checking in docs/rel_notes.txt;
/cvsroot/mozilla/webtools/bugzilla/docs/rel_notes.txt,v  <--  rel_notes.txt
new revision: 1.41; previous revision: 1.40
done