The Bugzilla team has released a security fix for Bugzilla 4.0.x. A CSRF vulnerability in the implementation of the XML-RPC API when running under mod_perl could be used to make changes to bugs or execute some admin tasks without the victim's knowled… more »

All Bugzilla hosting customers have been upgraded to Bugzilla 4.0.4. You can read more about the release at the Bugzilla site. A number of changes were released to address this http://www.bugzilla.org/security/3.4.13/: When a user creates a new acc… more »

Please be advised that there will be an extended system outage starting December 10 03:00 UTC (Dec 9 22:00 New York, Dec 10 14:00 Sydney). This downtime will last approximately 10 hours. During this time all equipment will be moved to a new data cente… more »

Please be advised that there will be an extended system outage starting December 3 03:00 UTC (Nov 2 22:00 New York, Nov 3 14:00 Sydney). This downtime will last approximately 10 hours. During this time all equipment will be moved to a new data center.… more »

This downtime has been rescheduled by 1 week. See this post for more info. Please be advised that there will be an extended system outage starting November 26 03:00 UTC (Nov 25 22:00 New York, Nov 26 14:00 Sydney). This downtime will last approximatel… more »