* Bugzilla's JavaScript and CSS should now be fully compatible with Internet Explorer 8. (Bug 483150)
* Running a saved search with a saved sort order will now no longer overwrite your default search order. (Bug 491679)
* You can now confirm a bug by popular vote even if there is no status called "NEW" in your Bugzilla. (Bug 500900)
* Displaying a bug with lots of comments should now be significantly faster. (Bug 498318)
This release also contains a security fix. See the Security Fixes Section for details.
Security fix:
* Attachment editing was vulnerable to a cross-site request forgery.
Note that this issue was only fixed for 3.2.3 and 3.3.4 even though
all versions of Bugzilla are affected (see below for an explanation).
bug fixes:
* Bugzilla is now compatible with MySQL 5.1.x versions 5.1.31
and greater. (Bug 480001)
* On Windows, Bugzilla sometimes would send mangled emails (that
would often fail to send). (Bug 467920)
* recode.pl would sometimes crash when trying to convert databases
from older versions of Bugzilla. (Bug 431201)
* Running a saved search with Unicode characters in its name would
cause Bugzilla to crash. (Bug 477513)
* Bugzilla clients like Mylyn can now update bugs again (the bug
XML format now contains a "token" element that can be used when
updating a bug). (Bug 476678)
* For installations using the shadowdb parameter, Bugzilla was
accidentally writing to the "tokens" table in the shadow database
(instead of the master database) when using the "Change Several
Bugs at Once" page. (Bug 476943)
* Attachments, charts, and graphs would sometimes be garbled on Windows. (Bug 464992)
* Saving changes to parameters would sometimes fail silently (particularly on Windows when the web server didn't have the right permissions to update the params file). Bugzilla will now throw an error in this case, telling you what is wrong. (Bug 347707)
* If you were using the usemenuforusers parameter, and a bug was assigned to (or had a QA Contact of) a disabled user, that field would be reset to the first user in the list when updating a bug. (Bug 465589)
* If you were using the PROJECT environment variable to have multiple Bugzilla installations using one codebase, project-specific templates were being ignored. (Bug 467324)
* Some versions of the SOAP::Lite Perl module had a bug that caused Bugzilla's XML-RPC service to break. checksetup.pl now checks for these bad versions and will reject them. (Bug 468009)
* The font sizes in various places were too small, when using the Classic skin. (Bug 469136)
Security fix for: http://www.bugzilla.org/security/3.0.7/
* Major UI Improvements
* New Default Skin: Dusk
* Custom Status Workflow
* New Custom Field Types
* Easier Installation
* Experimental Oracle Support
* Improved UTF-8 Support
* Group Icons
* Other Enhancements and Changes
For all the details see:
http://www.bugzilla.org/releases/3.2/release-notes.html
Initial patch supplied in PR #40181
* If you created a product or component with the same name as one you previously deleted, it would fail with an error about the series table. (Bug 247936)
* Includes a fix for: http://www.bugzilla.org/security/2.20.6/
* If you don't have permission to set a flag, it will now appear unchangeable in the UI. (Bug 433851)
* If you were running mod_perl, Bugzilla was not correctly closing its connections to the database since 3.0.3, and so sometimes the DB would run out of connections. (Bug 441592)
* The installation script is now clear about exactly which Email:: modules are required in Perl, thus avoiding the problem where emails show up with a body like SCALAR(0xBF126795). (Bug 441541)
* email_in.pl is no longer case-sensitive for values of @product. (Bug 365697)
Also addresses a new security issue:
http://www.bugzilla.org/security/2.22.4/
* Bugzilla administrators were not being correctly notified about new releases. (Bug 414726)
* There could be extra whitespace in email subject lines. (Bug 411544)
* The priority, severity, OS, and platform fields were always required by the Bug.create WebService function, even if they had defaults specified. (Bug 384009)
* Better threading of bugmail in some email clients. (Bug 376453)
* There were many fixes to the Inbound Email Interface (email_in.pl). (Bug 92274, Bug 377025, Bug 412943, Bug 413672, and Bug 431721)
* checksetup.pl now handles UTF-8 conversion more reliably during upgrades. (Bug 374951)
* Comments written in CJK languages are now correctly word-wrapped. (Bug 388723)
* All emails will now be sent in the correct language, when the user has chosen a language for emails. (Bug 405946)
* On Windows, temporary files created when uploading attachments are now correctly deleted when the upload is complete. (Bug 414002)
* checksetup.pl now prints correct installation instructions for Windows users using Perl 5.10. (Bug 414430)
3.0.3
* mod_perl no longer compiles Bugzilla's code for each Apache process individually. It now compiles code only once and shares it among each Apache process. This greatly improves performance and highly decreases the memory footprint. (Bug 398241)
* You can now search for '---' (without quotes) in versions and milestones. (Bug 362436)
* Bugzilla should no longer break lines unnecessarily in email subjects. This was causing trouble with some email clients. (Bug 374424)
* If you had selected "I'm added to or removed from this capacity" option for the "CC" role in your email preferences, you wouldn't get mail when more than one person was added to the CC list at once. (Bug 394796)
* Deleting a user account no longer deletes whines from another user who has the deleted account as addressee. The schedule is simply removed, but the whine itself is left intact. (Bug 395924)
* contrib/merge-users.pl now correctly merges all required fields when merging two user accounts. (Bug 400160)
* Bugzilla no longer requires Apache::DBI to run under mod_perl. It caused troubles such as lost connections with the DB and didn't give any important performance gain. (Bug 408766)
Security Fixes:
Unauthorized Bug Change
Cross-Site Scripting
Account Impersonation (Minor)
Bugzilla should now work on Perl 5.9.5 (and thus the upcoming Perl 5.10.0)
Fix for the following security advisory:
http://www.bugzilla.org/security/3.0.1/
* Even with account creation disabled, users can use the WebService to
create an account.
New features include:
* Custom Fields
* mod_perl Support
* Shared Saved Searches
* Attachments and Flags on New Bugs
* Custom Resolutions
* Per-Product Permissions
* User Interface Improvements
* XML-RPC Interface
* Skins
* Unchangeable Fields Appear Unchangeable
* All Emails in Templates
* No More Double-Filed Bugs
* Default CC List for Components
* File/Modify Bugs By Email
* Users Who Get All Bug Notifications
* Improved UTF-8 Support
* Automatic Update Notification
* Welcome Page for New Installs
* Other Enhancements and Changes
