Bugzilla Data/Mining Directory Insecure Permissions Vulnerability

Bugzilla Data/Mining Directory Insecure Permissions Vulnerability

Solution:
Debian has released a security advisory (DSA 230-1) containing fixes. Users are advised to upgrade as soon as possible.

The vendor has addressed this issue in Bugzilla 2.14.5, 2.16.2 and 2.17.3. Patches for 2.14.4 and 2.16.1 have also been made available.

Mozilla Bugzilla 2.14

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.14.1

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.14.2

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Debian bugzilla-doc_2.14.2-0woody4_all.deb
http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla-doc_2 .14.2-0woody4_all.deb

Debian bugzilla_2.14.2-0woody4_all.deb
http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla_2.14. 2-0woody4_all.deb

Mozilla Bugzilla 2.14.3

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.14.4

Bugzilla bugzilla-2.14.4-to-2.14.5.diff.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.4-to-2.14.5.diff.gz

Bugzilla Bugzilla 2.14.5
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.16

Bugzilla Bugzilla 2.16.2
http://www.bugzilla.org/download.html

Mozilla Bugzilla 2.16.1

Bugzilla bugzilla-2.16.1-to-2.16.2.diff.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-2.16.1-to-2.16.2.diff.gz