[Bugzilla-announce-list] Red Hat Bugzilla 4.4.6026 Released

[Jason Mcdonald]

Hosted & Shared Services is pleased to announce that Red Hat Bugzilla
4.4.6026 is now in production [1].

This release provides a number of bug-fixes and usability improvements,
and includes the security fixes that were released in the upstream 4.4.6
release.  (These were hot-fixed on Red Hat Bugzilla before the issues
were made public by the upstream Bugzilla team.)

This release also fixes two problems in the processing of queued jobs.
These problems were responsible for two recent incidents where delivery
of notification emails and processing of Rules Engine rules suffered
significant delays.

For a full list of changes, please see the changelog at the end of this
post.

If you find any new problems in this release, please file a bug [2].

Regards,
Jason McDonald, Red Hat Bugzilla Team Lead

 [1] https://bugzilla.redhat.com/
 [2] https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla

Bugzilla 4.4.6026 Changelog:

- Bug 1129519 - Rules Engine: Warn when rolling back disabled flags
- Bug 1132097 - Bug 1008406 fix seems to contain off-by-one (or more)
- Bug 1132354 - Bugzilla truncates comments containing Unicode
  characters above U+FFFF
- Bug 1132549 - Unable to move bug between products when original
  product allows multiple components
- Bug 1133364 - [RFE] Send an e-mail when Rules Engine rules are
  created or updated
- Bug 1134193 - Change BRE documentation from 'Statistics' to 'Details'
- Bug 1138216 - [RFE] Add a help link in the Rules Engine main page
- Bug 1138226 - Remove the "Clone Of" field from the action list of the
  Rules Engine
- Bug 1139071 - Catch errors when running the Rules Engine job queue
- Bug 1139075 - Add a cron to the Rules Engine to spool matching bugs
- Bug 1139379 - The last updated time in the external trackers is not
  localised
- Bug 1139933 - bugzilla-queue status returns wrong retval when not
  running
- Bug 1142504 - Show date and names separately in the Rules Engine's
  Kill Switch page
- Bug 1144223 - Make the job queue choose jobs fairly
- BMO Bug 252555 - Remove the ANSI mode when running MySQL
- BMO Bug 768892 - Specific Search without search words yields
  invalid_column_name message, complaining about sort order "relevance"
- BMO Bug 1036242 - "TypeError: bug_status is undefined" when creating
  a bug
- BMO Bug 1040728 - testserver.pl on Ubuntu 12.04 with Apache2
  invalidly gives error 'Failed to find the GID for the 'httpd' process'
- BMO Bug 1054702 - CSV export vulnerable to formulae injection
- BMO Bug 1061247 - Successfully using a password change token should
  invalidate all other password change tokens for that user
- BMO Bug 1064140 - [SECURITY] Private comments can be shown to
  flagmail recipients who aren't in the insider group
- BMO Bug 1069363 - "show user list again" link does not include
  is_enabled for showing previous results list
- BMO Bug 1069760 - Cannot use 'component' in a template
- BMO Bug 1070317 - Bugzilla::Flag's attribute modification_date is
  affected by the user's timezone and differs from the database
- BMO Bug 1072490 - Release notes for 4.4.6
- BMO Bug 1074980 - Forbid the { foo => $cgi->param() } syntax to
  prevent data override
- BMO Bug 1075578 - [SECURITY] Improper filtering of CGI arguments