Gentoo Security Advisory GLSA 201110-03 (bugzilla)

The remote host is missing updates announced in advisory GLSA 201110-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

DSA-2322-1 bugzilla - several

Bulletin has no description...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID dc8741b9-c5d5-11e0-8a8e-00151735203a OpenVAS Vulnerability Test $ Description: Auto generated from VID dc8741b9-c5d5-11e0-8a8e-00151735203a Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for bugzilla FEDORA-2011-10426

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : bugzilla-4.0.2-1.fc16 (2011-10399)

The Bugzilla developers have discovered a number of security bugs in Bugzilla. These are CVE-2011-2379, CVE-2011-2380, CVE-2011-2979, CVE-2011-2381, CVE-2011-2978, CVE-2011-2977. This release fixes these bugs. See http://www.bugzilla.org/security/3.4.11/ for all known details. Note that Tenable...

Fedora 14 : bugzilla-3.6.6-1.fc14 (2011-10413)

The Bugzilla developers have discovered a number of security bugs in Bugzilla. These are CVE-2011-2379, CVE-2011-2380, CVE-2011-2979, CVE-2011-2381, CVE-2011-2978, CVE-2011-2977. This release fixes these bugs. See http://www.bugzilla.org/security/3.4.11/ for all known details. Note that Tenable...

CVE-2011-2978

Bugzilla CVE-2011-2978: The vulnerability arises because Bugzilla does not prevent changes to the confirmation email address (old_email) when a user initiates an email change, allowing an attacker with access to another user’s session (e.g., an unattended workstation) to redirect the change notif...