the following changes have been pushed to bugzilla.mozilla.org:

• [942599] Documentation about possible_duplicates() lists ‘products’ as argument instead of ’product’
• [748095] Bugzilla crashes when the shutdownhtml parameter is set and using a non-cookie based authentication method
• [918384] backport upstream bug 756048 to bmo/4.2 to allow setting bug/attachment flags using the webservices
• [956135] backport upstream bug 952284 to bmo/4.2 to hide tags set to private comments in the bug activity table
• [956052] backport upstream bug 945535 to bmo/4.2 for performance improvement in bugs with large number of attachments