We have two new Review Board releases for you today, containing some large bug fixes and a couple new features.

Last week, we released Review Board 2.0.26 and 2.5.8, which had quite a number of important bug fixes for the product. Unfortunately, some of those fixes regressed other features, and we didn't want to go too long without fixing those. Specifically, we broke support for API tokens and we unintentionally altered the ordering of comments in drafts from the API.

These releases fix both of these problems, along with a handful of other bugs we've fixed during the week:

• Text selection in the diff viewer once again works properly on Firefox.
• We've worked around a bug in Python's logging.exception() (fixed in Python 2.7.6) that resulted in crashes for users on older systems.
• Extensions adding forms to the My Account page will no longer have problems setting the forms as invisible.
• Bumped up our minimum required version of pytz, to fix compatibility issues on older systems.

Along with this, Review Board 2.5.9 adds a few new features:

• Mercurial users can now browse and post existing commits in the New Review Request page (requires Mercurial 3.9 or higher).
• Extension authors are now given the old status of a review request that's been reopened in the review_request_reopened signal.
• API users can now view and query for inactive (disabled) users.

See the release notes for the full details and installation instructions:

• 2.5.9 release notes
• 2.0.27 release notes

We have two new Review Board releases for you today, full of bug fixes, new features, and a security fix.

An Important Security Fix

Both the 2.0.x and 2.5.x series had a bug in one of our APIs that could overload a server. We weren't properly limiting the amount of data being fetched and serialized in one case.

While this doesn't result in any form of access to the system or leaked information from the database, it can cause crashes on the server. We recommend that everyone upgrades to 2.0.26 or 2.5.8 to prevent this problem.

Some New Features

Review Board 2.5.8 introduces a number of improvements for repository configuration:

• We've made it easier to get started and resolve problems with Bitbucket repositories.
• Self-hosted Gitorious servers are now supported.
• Bug trackers on Codebase are now supported.
• It's easier to set up repositories hosted on GitLab.com.

We've also made a few other improvements across the product:

• E-mail addresses are accepted as usernames in the API. These were already accepted in the web UI.
• Extensions can add content to review e-mails.
• The "New Updates" dashboard column is now available on the All Review Requests page.

Lots of Bug Fixes

Both 2.0.26 and 2.5.8 contain many bug fixes for repository compatibility, the API, administrative settings, usability, and more.

The full details, plus installation/upgrade instructions, can be found in the release notes:

• 2.0.26 release notes
• 2.5.8 release notes