Change logs for bugzilla source package in Hoary

bugzilla (2.16.7-0.2ubuntu0.1) hoary-security; urgency=high


  * SECURITY UPDATE: cross-site scripting (XSS)
  * CGI.pl:
    - Applied patch from upstream.
  * template/en/default/global/code-error.html.tmpl:
    - Applied patch from upstream.
  * References:
    CAN-2004-1061

 -- Christian Bjälevik <email address hidden>  Fri,  6 May 2005 09:56:00 +0200

bugzilla (2.16.7-0.2) unstable; urgency=medium


  * NMU 0-days due to serious/important bug solving which prevents
    bugzilla entering testing.

  [ Alexis Sukrieh ]

  * Post-inst won't fail anymore when no MySQL server is
    available. Added an automatic way of setting up the MySQL server if
    /etc/mysql/debian.cnf exists, will read values from it then.
    (closes: #250638)
  * Using a MySQL user with '-' inside its name won't fail anymore.
    (closes unreported bug)
  * Better handling on DBI connection errors. When DBI complains about
    something, user is not confused anymore by ugly error messages.
    (closes: #154249)
  * Running checksetup.pl by hand won't break the Bugzilla's installation
    anymore. User can use it as he want without running dpkg-reconfigure.
    (closes: #200707)

  [ Francesco P. Lovergine ]

  * Now rules removes .cvsignore file which trashes /usr/share/bugzilla/template.
  * Added virtual package httpd to the list of web server.
    (closes: #213784)

 -- Francesco Paolo Lovergine <email address hidden>  Tue,  7 Dec 2004 22:54:45 +0100