aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@gmail.com>2012-02-17 21:12:07 +0100
committerFrédéric Buclin <LpSolit@gmail.com>2012-02-17 21:12:07 +0100
commit24c18ba8da6099daad74e98f9b6f3575d20e0063 (patch)
tree95532dabada2d34554754a4ead5740f7241f9e14 /template
parentTest 1 fails if PERLLIB contains paths with whitespace. (diff)
downloadbugzilla-24c18ba8da6099daad74e98f9b6f3575d20e0063.tar.gz
bugzilla-24c18ba8da6099daad74e98f9b6f3575d20e0063.tar.bz2
bugzilla-24c18ba8da6099daad74e98f9b6f3575d20e0063.zip
Bug 727893: Release notes for Bugzilla 4.0.5
r=dkl a=LpSolit
Diffstat (limited to 'template')
-rw-r--r--template/en/default/pages/release-notes.html.tmpl16
1 files changed, 16 insertions, 0 deletions
diff --git a/template/en/default/pages/release-notes.html.tmpl b/template/en/default/pages/release-notes.html.tmpl
index 8b970438f..4f062e955 100644
--- a/template/en/default/pages/release-notes.html.tmpl
+++ b/template/en/default/pages/release-notes.html.tmpl
@@ -72,6 +72,22 @@
<h2 id="v40_point">Updates in this 4.0.x Release</h2>
+<h3>4.0.5</h3>
+
+<p>This release fixes one security issue. See the
+ <a href="http://www.bugzilla.org/security/4.0.4/">Security Advisory</a>
+ for details.</p>
+
+<p>In addition, the following important change has been made in this release:</p>
+
+<ul>
+ <li>Clickjacking could possibly occur in the attachment "View All" page if a user
+ attached a specially formatted HTML file. To fix this potential problem, the
+ "View All" page now always displays the source code for all attachments whose
+ MIME type is <em>text/html</em>.
+ (<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=722161">[% terms.Bug %] 722161</a>)</li>
+</ul>
+
<h3>4.0.4</h3>
<p>This release fixes two security issues. See the