Security updates for Bugzilla

The developers of the Bugzilla open source bug tracking system have released versions 3.0.9, 3.2.5 and 3.4.2, which fix SQL injection vulnerabilities and remove a means of sniffing out a user’s password.

The SQL injection vulnerabilities can be used to gain access to the database, allowing attackers to discover, change and delete content.