BMO/Recent Changes

From MozillaWiki
< BMO
Revision as of 15:20, 19 March 2026 by DaveLawrence (talk | contribs)
Jump to navigation Jump to search

Recent Changes

2026-03-19

release-20260319.1

  • bug 2003867 reviewer rotation seems to always assign patches to the same reviewers within the group

2026-03-12

release-20260305.2

  • bug 1995468 Support URL pasting in markdown editor
  • bug 2018260 "Fields You Can Search On" is blocking people from making it through quicksearch.html doc
  • bug 2022581 Support Git trailer convention when parsing bug numbers out of commit messages
  • bug 2022370 Support updated uplift request form field names from Lando

2026-03-02

release-20260302.2

  • bug 2017436 Updates for bmo.readthedocs.org to fix a recent issue building the RST docs
  • bug 2016490 Create dedicated group for viewing user group memberships
  • bug 2017743 Errors are occurring intermittently when submitting a new job to the job queue to send email
  • bug 2019859 [HackerOne] IDOR in REST API Reminder Deletion — Any Authenticated User Can Delete Other Users' Reminders
  • bug 2015155 [HackerOne] Faulty Phabricator-Bugzilla integration logic leads to secure revision takeover and bug title disclosure

2026-02-04

release-20260204.1

  • bug 2009883 [HackerOne] [Bugzilla] Account Takeover via Side-Channel Attack
  • bug 2012069 [HackerOne] unauthenticated blind SQL injection in search feature
  • bug 1764214 add a warning that the BMO uplift request flow will soon be deprecated

2026-01-20

release-20260120.1

  • bug 2009746 Whine events allow newlines in subject line which can be used to inject email headers
  • bug 1996136 Create a new cron script (weekly) that accesses the Recorded Future API and looks for compromised BMO accounts
  • bug 2007378 [HackerOne] Path traversal on bugzilla.mozilla.org via improper path canonicalization leads to arbitrary content loading
  • bug 2009837 After recent update sitemap extensions is including improperly formatted urls in the sitemap gz files

Archive