the following changes have been pushed to bugzilla.mozilla.org:

• [791758] Preparation for mass change from whiteboard ’[orange]’ to keyword ’intermittent-failure’
• [810870] Auto-cc should work for needinfo requests as it does for review requests
• [625194] Preparation for setting the QA contact for all bugs in the Bugzilla product to default-qa@bugzilla.bugs
• [731178] field-events.js.tmpl discloses product and component names that the user is not allowed to see
• [802204] Marking an attachment you cannot see as obsolete can disclose its description
• [781850] Do not leak the existence of groups when using User.get()
• [808845] Security vulnerability in YUI’s swfstore.swf in YUI 2.8.2 and 2.9.0
• [589322] Roll out bugzilla-push extension on bmo
• [809195] Put up notice that MoLegal form is deprecated in favour of project-review form
• [804978] The BzAPI extension let everybody see all confidential product names when classifications are enabled
• [809198] Enable multiple needinfo flags on a single bug