Release of Bugzilla 3.2.10, 3.4.10, 3.6.4, and 4.0rc2

We just released Bugzilla 3.2.10, 3.4.10, 3.6.4, and 4.0rc2. Mostly, these contain a lot of very important security fixes. One of the fixes in particular took over 100 hours of work from the Bugzilla team as a whole and a host of external contributors, and we’ll be blogging about that in more detail in the coming days or weeks. Right now, what’s important to know is that these issues are pretty serious and you should update as soon as possible.

Older versions of Bugzilla are also affected, even though they haven’t been patched because they have reached End Of Life. If you are running a version of Bugzilla earlier than 3.2, it is now very important that you upgrade so that you can remain secure.

Most of the issues that were fixed today were discovered as a result of Mozilla expanding their security bug bounty program to include web applications. We’d like to thank Mozilla for funding this initiative and helping us significantly improve the security of Bugzilla in various areas.

Progress Toward Bugzilla 4.0

With the release of Bugzilla 4.0rc2, we’re that much closer to Bugzilla 4.0! This second Release Candidate has a fully-tested Bug.update WebService method, so we don’t expect its API to change any more (although it has changed quite a bit since 4.0rc1 thanks to testing and bug fixes). The other new WebService methods may still change before the final release of 4.0, as we haven’t tested all of them yet.

4.0rc2 also contains a lot of bug fixes over rc1, and should be relatively stable. Now is the time to start trying out deployments of it to see if everything is okay in your environment. Our current plan is to release Bugzilla 4.0 on Tuesday, February 15, 2011 if everything goes well with this release.

-Max

About these ads

0 Responses to “Release of Bugzilla 3.2.10, 3.4.10, 3.6.4, and 4.0rc2”



  1. Leave a Comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s




Upcoming Events

  • Bugzilla Public Meeting November 26, 2014 at 7:00 am – 7:00 am Mozilla Vidyo, Air Mozilla, IRC Public Bugzilla planning meeting. Anyone interested in contrib uting to Bugzilla, in planning, development, testing, documentation, o r any other aspect, should feel free to attend. See https://wiki.mozill a.org/Bugzilla:Meetings for more.
  • Bugzilla Public Meeting December 24, 2014 at 3:00 pm – 2:00 pm Mozilla Vidyo, Air Mozilla, IRC Public Bugzilla planning meeting. Anyone interested in contrib uting to Bugzilla, in planning, development, testing, documentation, o r any other aspect, should feel free to attend. See https://wiki.mozill a.org/Bugzilla:Meetings for more.

Follow

Get every new post delivered to your Inbox.

Join 584 other followers

%d bloggers like this: