Mageia alert MGASA-2012-0255 (bugzilla)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0255: bugzilla-4.2.3-1.mga2 (2/core) 
Date:
    	     
 
Tue, 4 Sep 2012 20:50:09 +0200
Message-ID:
    	     
 
<20120904185008.GA22097@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0255
Date: 	September 4th, 2012
Affected releases: 	2


Description:
This security update for bugzilla fixes:

CVE-2012-3981, LDAP injection vulnerability.

CVE-2012-1969, Information Leak - description of a private attachment.

Also fixed are various other small bugs, see the referenced release
notes.


Updated Packages:
bugzilla-4.2.3-1.mga2
bugzilla-contrib-4.2.3-1.mga2


References:
http://www.bugzilla.org/releases/4.2.2/release-notes.html
http://www.bugzilla.org/releases/4.2.3/release-notes.html
https://bugs.mageia.org/show_bug.cgi?id=7267
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...