In association with heise online

You can send this piece of news from The H as an email:

You can specify up to 5 recipients, separated by commas.

Passphrase Bitte Grafik laden

Your personal data will only be used to deliver this mail. The data will not be used for any other purposes.

Vulnerabilities in bug tracking system Bugzilla fixed

The latest update to the widely distributed Bugzilla open source bug tracking system fixes multiple vulnerabilities. In a security advisory the development team report three security holes that could be exploited by attackers to carry out cross-site scripting attacks. These would allow the status of a bug to be changed without the required privileges or the reporter of a bug to be faked.

The bugs affect Bugzilla prior to versions 2.20.6, 2.22.4, 3.0.4 and 3.1.4. Source code packages and patches for specific version branches can be downloaded from the project website. Linux distributors should also be distributing updated packages shortly, which Bugzilla administrators should install as soon as possible.

See also:

(mba)



  • May's Community Calendar






The H Open

The H Security

The H Developer

The H Internet Toolkit