bugzilla - several

Fixed packages 1

Vulnerabilities 10

• Unscored —
  CVE-2010-4567

  Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 does not properly handle white…

  Jan 28, 2011
• Unscored —
  CVE-2010-4568

  Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x…

  Jan 28, 2011
• Unscored —
  CVE-2010-4572

  CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x…

  Jan 28, 2011
• Unscored —
  CVE-2011-0046

  Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before…

  Jan 28, 2011
• Unscored —
  CVE-2011-0048

  Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates a clickable link for a…

  Jan 28, 2011
• Unscored —
  CVE-2011-2379

  Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.…

  Aug 9, 2011
• Unscored —
  CVE-2011-2380

  Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befor…

  Aug 9, 2011
• Unscored —
  CVE-2011-2381

  CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x …

  Aug 9, 2011
• Unscored —
  CVE-2011-2978

  Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x befo…

  Aug 9, 2011
• Unscored —
  CVE-2011-2979

  Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group n…

  Aug 9, 2011