Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Critical Update: SQL Injection Vulnerability in Fedora 11 Bugzilla 3.2.5

fedora
Calendar Grey September 18, 2009
Scroller Fedora
Announcement for Fedora 11 regarding the upgrade to Bugzilla version 3.2.5, which resolves two critical SQL injection vulnerabilities, ensuring adherence to established security protocols.
Update to upstream version 3.2.5 fixing two SQL injection security flaws (CVE-2009-3125, CVE-2009-3165) detailed in the upstream security advisory: https://www.bugzilla.org/securi...

Summary

Bugzilla is a popular bug tracking system used by multiple open source projects

It requires a database engine installed - either MySQL, PostgreSQL or Oracle.

Without one of these database engines (local or remote), Bugzilla will not work

- see the Release Notes for details.

Update Information:

Update to upstream version 3.2.5 fixing two SQL injection security flaws (CVE-2009-3125, CVE-2009-3165) detailed in the upstream security advisory: https://www.bugzilla.org/security/3.0.8/

Topics%20covered

Topics Covered

security advisory update critical Fedora software fix SQL injection bugzilla

Change Log

* Fri Sep 11 2009 Emmanuel Seyman - 3.2.5-1 - Update to 3.2.5 (CVE-2009-3125, CVE-2009-3165 and CVE-2009-3166) * Wed Jul 8 2009 Itamar Reis Peixoto - 3.2.4-1 - fix https://bugzilla.mozilla.org/show_bug.cgi?id=495257

References


[ 1 ] Bug #522547 - "major security issue" bugfix release imminent https://bugzilla.redhat.com/show_bug.cgi?id=522547

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update bugzilla' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: bugzilla
Product: Fedora 11
Version: 3.2.5
Release: 1.fc11
URL: https://www.bugzilla.org/
Summary: Bug tracking system

Topics%20covered

Topics Covered

security advisory update critical Fedora software fix SQL injection bugzilla

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.