--- Bugzilla/BugMail.pm 13 Aug 2005 15:04:29 -0000      1.39.4.2
+++ Bugzilla/BugMail.pm 22 Oct 2005 20:23:06 -0000
@@ -261,6 +261,20 @@
         $diffpart->{'fieldname'} = $fieldname;
         $diffpart->{'text'} = $difftext;
         push(@diffparts, $diffpart);
+        
+        # If the security bit is being set or unset, CC the appropriate
+        # security list. This is to make sure security bugs don't get lost.
+        if ($fieldname eq "bug_group") {
+            if ($old =~ /webtools-security/ || $new =~ /webtools-security/) {
+                push(@cc, 'security@bugzilla.org');
+            }
+            if ($old =~ /update-security/ || $new =~ /update-security/) {
+                push(@cc, 'security@bugzilla.org');
+            }
+            if ($old =~ /security/ || $new =~ /security/) {
+                push(@cc, 'security@mozilla.org');
+            }
+        }
     }
 
     my $deptext = "";