Bug 189589

Summary: Searching for bugs with the "Security" keyword is odd
Product: [Community] Bugzilla Reporter: Josh Bressers <bressers>
Component: Bugzilla GeneralAssignee: PnT DevOps Devs <hss-ied-bugs>
Status: CLOSED CURRENTRELEASE QA Contact: Kevin Baker <kbaker>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.6CC: deisenst, ineilsen, nelhawar, security-response-team, vdanen
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-12-17 11:32:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Josh Bressers 2006-04-21 13:21:11 UTC
Since the removal of the "Security" severity, the way we must search for
secuirty bugs doesn't work as epxected. There is a difference between selecting
a qeury that contains "all of the keywords" vs a query that contains "any of the
keywords"

See the examples below: 

Show any keywords
https://bugzilla.redhat.com/bugzilla/buglist.cgi?query_format=advanced&bug_status=NEW&keywords_type=anywords&keywords=Security

Show all keywords
https://bugzilla.redhat.com/bugzilla/buglist.cgi?query_format=advanced&bug_status=NEW&keywords_type=allwords&keywords=Security

These queries should return the same result.

Comment 1 David Eisenstein 2006-04-22 07:27:20 UTC
I concur.  I made an entry to Bug # 188831 in the last few minutes, and,
strangely enough, this is *only* bug that now shows up when I perform this
query (For Product="Fedora Core", Component="firefox", Keywords (Contains
All of the Keywords)="Security").

https://bugzilla.redhat.com/bugzilla/buglist.cgi?query_format=advanced&product=Fedora+Core&component=firefox&keywords_type=allwords&keywords=Security

Additionally, looking at Bug Activity for #188831:
  <https://bugzilla.redhat.com/bugzilla/show_activity.cgi?id=188831>,

it curiously shows that at 16:55 on 2006-04-20, Keywords changed from ""
to "Security";  then it shows at 02:49 on 2006-04-22, that *I* changed the
Keywords from "" to "Security"??  Very strange, indeed!

Comment 2 David Eisenstein 2006-04-22 07:48:55 UTC
Ditto for Bug# 179170, replacing the Component in the query with
"mozilla" instead of "firefox".  Including the Bug Activity strangeness.

https://bugzilla.redhat.com/bugzilla/buglist.cgi?query_format=advanced&product=Fedora+Core&component=mozilla&keywords_type=allwords&keywords=Security

Comment 3 David Lawrence 2008-09-16 16:54:24 UTC
Red Hat Bugzilla is now using version 3.2 of the Bugzilla codebase and therefore this bug will need to be re-verified against the new release. With the updated code this bug may no longer be relevant or may have been fixed in the new code.
Updating bug version to 3.2.

Comment 4 Tomas Hoger 2008-09-30 12:30:47 UTC
For the two queries in comment #0, anywords variant finds 3 more bugs (all private) that all seem to have single 'Security' keyword (e.g. test bug #458334).

Comment 5 David Lawrence 2010-01-15 16:55:04 UTC
Red Hat Bugzilla is now using version 3.4 of the Bugzilla codebase and
therefore this bug will need to be re-verified against the new release. With
the updated code this bug may no longer be relevant or may have been fixed in
the new code. Updating bug version to 3.4.

Comment 6 David Lawrence 2010-08-25 21:40:42 UTC
Red Hat has now upgraded to Bugzilla 3.6 and this bug will now be reassigned to that version. It would be helpful to the Bugzilla Development Team if this bug is verified to still be an issue with the latest version. If it is no longer an issue, then feel free to close, otherwise please comment that it is still a problem and we will try to address the issue as soon as we can.

Thanks
Bugzilla Development Team

Comment 8 Vincent Danen 2010-12-16 15:41:10 UTC
I think perhaps this has been corrected now.  Using both links from #c0, I get 1605 bugs in each query.

Also testing with:

https://bugzilla.redhat.com/buglist.cgi?keywords=Security&query_format=advanced&keywords_type=allwords&bug_status=NEW&product=Fedora&classification=Fedora

vs:

https://bugzilla.redhat.com/buglist.cgi?keywords=Security&query_format=advanced&keywords_type=anywords&bug_status=NEW&product=Fedora&classification=Fedora

They both show 105 bugs, so I think this can be resolved.

Comment 9 Noura El hawary 2010-12-17 11:32:20 UTC
Thanks for the feedback Vincent. I will close the bug.