Bug 916254 - Bug.get should include the name for reporter, assigned_to and qa_contact
r=dkl,a=sgreen
Fixes on checkin for bug 769134
Backout 1st part of bug 340160: state $sth doesn't work fine with mod_perl
Bug 340160: Speed up LogActivityEntry()
r=dkl a=glob
Bug 917370: large dependency trees are very slow to load
r=dkl, a=simon
Bug 912641: Release notes for Bugzilla 4.4.1
r=dkl a=LpSolit
Bug 906745 - In MySQL, tokens are not case-sensitive, reducing total entropy and allowing easier brute force
r=LpSolit,a=glob
Bug 907438 - In MySQL, login cookie checking is not case-sensitive, reducing total entropy and allowing easier brute force
r=LpSolit,a=sgreen
Bug 911593: (CVE-2013-1733) [SECURITY] CSRF in process_bug.cgi
r=dkl a=sgreen
Bug 913904: (CVE-2013-1734) [SECURITY] CSRF when updating attachments
r=dkl a=sgreen
Bug 924802: (CVE-2013-1742) [SECURITY] (XSS) "id" and "sortkey" are not sanitized when editing flag types if categoryAction-foo is set
r=dkl a=glob
Bug 924932: (CVE-2013-1743) [SECURITY] Field values are not escaped correctly in tabular reports
r=dkl a=glob
Bump version to 4.5.1
Bug 927570: mid-air conflict fails to check all changed fields
r=dkl, a=simon
Bug 927736: "invalid token" error if someone else changes the CC list while viewing a bug
r/a=LpSolit
Bump version post-release
Bug 926232 - CSS style ".bz_status_UNCONFIRMED" is not applied due to typo.
r=Wurblzap; a=glob
Bug 930013: fall back to the bug's current delta_ts when validating a token if one is not provided to process_bug.cgi
r=dkl,a=glob
Bug 928092: Add OS detection for Windows 8.1
r=justdave a=glob
Bug 928410 - Bug.get should return detail about cc list members similar to assigned_to, creator and qa_contact
r=gerv,a=glob