783053 - (bz-release-423) Release Bugzilla 4.3.3, 4.2.3, 4.0.8 and 3.6.11

Status: RESOLVED FIXED

(Bugzilla :: Bugzilla-General, defect)

Description

[Frédéric Buclin]

There are a few reasons to release Bugzilla 4.2.3 sooner rather than later:
- buglist.cgi crashes with Oracle in 4.2.2, bug 780028;
- fix a minor CSRF bug about forgotten passwords, bug 706271;
- fix a minor sec bug about leaking some limited information about private comments and attachments, bug 779709;
- fix a regression in 4.2.2 about auto-completion for keywords, bug 780883;
- make attachment uploads work in Perl 5.16.x, bug 771100.

Comment 1

[Frédéric Buclin]

And about Bugzilla 4.3.3, the reason to release it, besides what has already been said above, is that 4.3.2 doesn't work with IIS at all, see bug 783386.

Comment 2

[Frédéric Buclin]

Due to recent security bugs found, we will have to release for all supported branches.

Comment 3

[David Lawrence [:dkl]]

Attachment: website updates (v1)

Comment 4

[Frédéric Buclin]

Comment on attachment 656619 [details] [diff] [review]
website updates (v1)

r=LpSolit

Comment 5

[David Lawrence [:dkl]]

Attachment: 4.3.3 release announcement (v1)

Comment 6

[Frédéric Buclin]

Comment on attachment 656919 [details]
4.3.3 release announcement (v1)

>  Bugzilla 4.0.8 and 3.6.11 are security updates for the 4.0
>branch and the 3.6 branch, respectively. 4.0.8 also contains
>several bug fixes.

The last sentence is inaccurate. There is only one bug fix besides the two security bug fixes.


>be used in production environments. We are not yet feature-frozen at
>this time

We are mostly feature-frozen as only WebServices patches are accepted at this point.


Otherwise looks good. Could you update your patch, please?

Comment 7

[David Lawrence [:dkl]]

Committing to: bzr+ssh://[e-mail]/bugzilla/3.6
modified Bugzilla/Constants.pm
modified docs/en/xml/Bugzilla-Guide.xml
Committed revision 7298.

Committing to: bzr+ssh://[e-mail]/bugzilla/4.0
modified Bugzilla/Constants.pm
modified docs/en/xml/Bugzilla-Guide.xml
Committed revision 7722.

Committing to: bzr+ssh://[e-mail]/bugzilla/4.2
modified Bugzilla/Constants.pm
modified docs/en/xml/Bugzilla-Guide.xml
Committed revision 8133.

Committing to: bzr+ssh://[e-mail]/bugzilla/trunk
modified Bugzilla/Constants.pm
modified docs/bugzilla.ent.tmpl
Committed revision 8371. 

Created tag bugzilla-3.6.11
Created tag bugzilla-4.0.8
Created tag bugzilla-4.2.3
Created tag bugzilla-4.3.3

Comment 8

[David Lawrence [:dkl]]

Attachment: 4.3.3 release announcement (v2)

Comment 9

[Frédéric Buclin]

Comment on attachment 656982 [details]
4.3.3 release announcement (v2)

r=LpSolit

Comment 10

[David Lawrence [:dkl]]

Bumping revisions post-release:

Committing to: bzr+ssh://[e-mail]/bugzilla/3.6
modified Bugzilla/Constants.pm
Committed revision 7299. 

Committing to: bzr+ssh://[e-mail]/bugzilla/4.0
modified Bugzilla/Constants.pm
Committed revision 7723. 

Committing to: bzr+ssh://[e-mail]/bugzilla/4.2
modified Bugzilla/Constants.pm
Committed revision 8134.

Committing to: bzr+ssh://[e-mail]/bugzilla/trunk
modified Bugzilla/Constants.pm
Committed revision 8372.

Comment 11

[David Lawrence [:dkl]]

Tarballs and diffs uploaded to stage.mozilla.org. LATEST/STABLE links updated. Permissions set correctly.

Comment 12

[David Lawrence [:dkl]]

Website checked in:

Checking in lib/releases-list.txt;
/www/bugzilla-org/lib/releases-list.txt,v  <--  releases-list.txt
new revision: 1.38; previous revision: 1.37
done
Checking in src/index.html;
/www/bugzilla-org/src/index.html,v  <--  index.html
new revision: 1.74; previous revision: 1.73
done
Checking in src/docs/index.html;
/www/bugzilla-org/src/docs/index.html,v  <--  index.html
new revision: 1.68; previous revision: 1.67
done
Checking in src/download/index.html;
/www/bugzilla-org/src/download/index.html,v  <--  index.html
new revision: 1.252; previous revision: 1.251
done
Checking in src/news/index.html;
/www/bugzilla-org/src/news/index.html,v  <--  index.html
new revision: 1.92; previous revision: 1.91
done
RCS file: /www/bugzilla-org/src/releases/3.6.11/index.html,v
done
Checking in src/releases/3.6.11/index.html;
/www/bugzilla-org/src/releases/3.6.11/index.html,v  <--  index.html
initial revision: 1.1
done
RCS file: /www/bugzilla-org/src/releases/3.6.11/release-notes.html,v
done
Checking in src/releases/3.6.11/release-notes.html;
/www/bugzilla-org/src/releases/3.6.11/release-notes.html,v  <--  release-notes.html
initial revision: 1.1
done
RCS file: /www/bugzilla-org/src/releases/4.0.8/index.html,v
done
Checking in src/releases/4.0.8/index.html;
/www/bugzilla-org/src/releases/4.0.8/index.html,v  <--  index.html
initial revision: 1.1
done
RCS file: /www/bugzilla-org/src/releases/4.0.8/release-notes.html,v
done
Checking in src/releases/4.0.8/release-notes.html;
/www/bugzilla-org/src/releases/4.0.8/release-notes.html,v  <--  release-notes.html
initial revision: 1.1
done
RCS file: /www/bugzilla-org/src/releases/4.2.3/index.html,v
done
Checking in src/releases/4.2.3/index.html;
/www/bugzilla-org/src/releases/4.2.3/index.html,v  <--  index.html
initial revision: 1.1
done
RCS file: /www/bugzilla-org/src/releases/4.2.3/release-notes.html,v
done
Checking in src/releases/4.2.3/release-notes.html;
/www/bugzilla-org/src/releases/4.2.3/release-notes.html,v  <--  release-notes.html
initial revision: 1.1
done
Checking in src/releases/4.4/index.html;
/www/bugzilla-org/src/releases/4.4/index.html,v  <--  index.html
new revision: 1.3; previous revision: 1.2
done
Checking in src/security/index.html;
/www/bugzilla-org/src/security/index.html,v  <--  index.html
new revision: 1.42; previous revision: 1.41
done
RCS file: /www/bugzilla-org/src/security/3.6.10/index.html,v
done
Checking in src/security/3.6.10/index.html;
/www/bugzilla-org/src/security/3.6.10/index.html,v  <--  index.html
initial revision: 1.1
done
Checking in src/status/changes.html;
/www/bugzilla-org/src/status/changes.html,v  <--  changes.html
new revision: 1.76; previous revision: 1.75
done

Comment 13

[Frédéric Buclin]

bugzilla-update.xml updated and security advisory sent.

Comment 14

[David Lawrence [:dkl]]

Release over. Closing. Thanks to everyone involved!

dkl