the following changes have been pushed to bugzilla.mozilla.org:
- [1220734] Use of uninitialized value $proxies[0] in string eq at Bugzilla/Util.pm line 315.
- [1219750] Allow Apache2::SizeLimit to be configured via params
- [1209625] Error when using bzexport: abort: REST error on PUT to https://bugzilla.mozilla.org/rest/bug/1209611: The requested method ‘Bug.update’ was not found.“
- [1177911] Determine and implement better password requirements for BMO
- [1221851] Parameter description for "password_complexity” is incorrect
- [1196743] Fix information disclosure vulnerability that allows attacker to obtain victim’s GitHub OAuth return code
discuss these changes on mozilla.tools.bmo.