Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Bugzilla | Mozilla | 2.14 | 2.14 |
Bugzilla | Mozilla | 2.14.1 | 2.14.1 |
Bugzilla | Mozilla | 2.16 | 2.16 |
Bugzilla | Mozilla | 2.16 | 2.16 |