Bug 14694 – Security flaw in bugzilla

Bug 14694 - Security flaw in bugzilla

Summary:

Security flaw in bugzilla

Status:	CLOSED FIXED

Product:	Codex
Classification:	Unclassified
Component:	collab
Version:	test grimoire
Platform:	x86 Linux

Importance:	P1 critical
Assigned To:	Grimoire Bug List

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2008-08-28 20:41 UTC by David Kowis
Modified:	2008-08-28 22:31 UTC (History)
CC List:	1 user (show)

See Also:

Flags:
eric: fixed_in_lesser_branch+ eric: integrate_to_stable_grimoire+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description David Kowis 2008-08-28 20:41:43 UTC

http://www.bugzilla.org/security/2.22.4/

It's actually not that important, because most people don't use the bug importing ability.

However, there might be *someone* using it and I don't want to downplay it any. So this needs to be integrated asap.
commit-sh (in test):
8569da8454d37df6a1fcf86b823a2fb9ad5d694b

Comment 1 Eric Sandall 2008-08-28 22:12:04 UTC

Approved for stable-0.24.

Comment 2 Eric Sandall 2008-08-28 22:13:19 UTC

Integrated to stable-0.24 with commit 7e16c0fb750b32ebf06cd1b24ff4e5a2fb43e381

Comment 3 Eric Sandall 2008-08-28 22:31:57 UTC

New stable-0.24 tarball generated and pushed.