Gentoo Linux Security Advisory 201006-19 - Bugzilla is prone to multiple medium severity vulnerabilities. Multiple vulnerabilities have been reported in Bugzilla. Please review the CVE identifiers referenced below for details. Versions less than 3.2.6 are affected.
8bc8d5d14b76f0df7073a6835b0a2ff5f2bd13db23acc400fb9646c1ca17bcc2
Debian Linux Security Advisory 1913-1 - Max Kanat-Alexander, Bradley Baetz, and Frederic Buclin discovered an SQL injection vulnerability in the Bug.create WebService function in Bugzilla, a web-based bug tracking system, which allows remote attackers to execute arbitrary SQL commands.
c5d137ab50a744411d6e2e95999268eb1d61eeb1d94d9061a8c3862af477653b