doesn't protect WebService calls at all
Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit/mkanat

Bug 448593: Move code to edit product group settings from editproducts.cgi to Bugzilla/Product.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 423078: Advanced Search "any one of" wording wrong - Patch by Rupert Handford <rupert@handfordonline.plus.com> r=pyrzak r=LpSolit r=mkanat a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat

Bug 437169: [SECURITY] Local files on the server can be attached to a bug (making them publicly visible) when importing bugs with -attach_path
Patch By Greg Hendricks <ghendricks@novell.com> r=LpSolit, a=mkanat

Patch By Guy Pyrzak <guy.pyrzak@gmail.com> r=LpSolit, a=LpSolit

Bug 450193: Cloning a bug may fail if a custom date/time field exists - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 449927: "Insert new group into all existing products" should be a label when creating a new group - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 429626: editgroups.cgi incorrectly states that group names cannot contain spaces - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit

Bug 449693: If a custom multi-select field is active, displaying all columns in buglists throws a SQL error - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 443479 – Clicking "Reset to Bugzilla default" when editing columns for a saved search does not reset them properly
Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=xiaoou, a=mkanat

Bug 449700: Remove useless code from colchange.cgi - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 442031: Make Bugzilla::User::groups return an arrayref of Bugzilla::Group objects (instead of a hashref of group ids and names).

Bug 449663: Code error thrown when resolving bug as duplicate of a bug the reporter cannot see - Patch by David Lawrence <dkl@redhat.com> r/a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit

Patch By Jesse Clark <jjclark1982@gmail.com> r=mkanat, a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 449390: "Add Product" fails with software error "Column 'defaultmilestone' cannot be null" - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Patch By A.A. Shimono <shimono@mozilla.gr.jp> r=eseyman, a=LpSolit

Bug 449248: Improve $product->group_controls - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 449184: Classification should not appear in new bugmail when useclassification = 0 - Patch by A.A. Shimono (himorin) <shimono@mozilla.gr.jp> r/a=LpSolit

Bug 448748: Error messages thrown should have an HTML ID - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat

Patch By Xiaoou Wu <xiaoou.wu@oracle.com> r=mkanat, a=mkanat

Patch By Xiaoou Wu <xiaoou.wu@oracle.com> r=mkanat, a=mkanat

Bug 313122: Implement Product->create, $product->update and $product->remove_from_db, and make editproducts.cgi use them - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 132383: Bugzilla should have a default favicon - Patch by Guy Pyrzak <guy.pyrzak@gmail.com> r/a=mkanat

Bug 448391: Bug->create() should make sure the reporter is logged in - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Bug 431669: The "product_id" column is incorrectly defined in the "group_control_map" DB table - Patch by Tony Fu <tfu@redhat.com> r=LpSolit a=mkanat

in the respective bug reports.

Bug 428659 – Setting SSL param to 'authenticated sessions' only
protects logins and param doesn't protect WebService calls at all
Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat

Bug 445104: ssl redirects come with a 200 OK HTTP code on mod_perl
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat