Bugzilla LocalConfig Backup File Disclosure Vulnerability

Bugzilla LocalConfig Backup File Disclosure Vulnerability

Solution:
Debian has released a security advisory (DSA 230-1) containing fixes. Users are advised to upgrade as soon as possible.

The vendor has addressed this issue in Bugzilla 2.14.5, 2.16.2 and 2.17.3. Patches for 2.14.4 and 2.16.1 have also been made available.

Mozilla Bugzilla 2.14

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.14.1

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.14.2

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Debian bugzilla-doc_2.14.2-0woody4_all.deb
http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla-doc_2 .14.2-0woody4_all.deb

Debian bugzilla_2.14.2-0woody4_all.deb
http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla_2.14. 2-0woody4_all.deb

Mozilla Bugzilla 2.14.3

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.14.4

Bugzilla bugzilla-2.14.4-to-2.14.5.diff.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.4-to-2.14.5.diff.gz

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.16

Bugzilla Bugzilla 2.16.2
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.16.1

Bugzilla bugzilla-2.16.1-to-2.16.2.diff.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-2.16.1-to-2.16.2.diff.gz