Bugzilla

Bugzilla is a database for bugs. It lets people report bugs and assigns these bugs to the appropriate developers. Developers can use bugzilla to keep a to-do list as well as to prioritize, schedule and track dependencies.

• A regression in Bugzilla 5.0.2 caused whine.pl to be unable to send emails due to a missing subroutine. (Bug 1235395)
• The Encode module changed the way it encodes strings, causing email addresses in emails sent by Bugzilla to be encoded, preventing emails from being correctly delivered to recipients. We now encode email headers correctly. (Bug 1246228)
• Fix additional taint issues with Strawberry Perl. (Bug 987742 and bug 1089448)
• When exporting a buglist as a CSV file, fields starting with either "=", "+", "-" or "@" are preceded by a space to not trigger formula execution in Excel. (Bug 1259881)
• An extension which allows user-controlled data to be used as a link in tabs could trigger XSS if the data is not correctly sanitized. Bugzilla no longer relies on the extension to do the sanity check. A vanilla installation is not affected as no tab is user-controlled. (Bug 1250114)
• Extensions can now easily override the favicon used for the Bugzilla website. (Bug 1250264)