|
Bugzilla Default HTML Template Cross-Site Scripting Vulnerabilities
Solution: Conectiva has released an advisory (CLA-2003:653) and fixes to address this issue. See attached advisory for details on obtaining and applying fixes. The vendor has addressed this issue in Bugzilla 2.16.3 and 2.17.4. Patches may be obtained at the following location: http://ftp.mozilla.org/pub/webtools/ Full release upgrades and CVS upgrade instructions will be made available here: http://www.bugzilla.org/download.html Users should contact individual localization maintainers for details on whether their particular localization is affected and details on obtaining fixes. Mozilla Bugzilla 2.16.2
|
|
Privacy Statement |