About:
Bugzilla is the leading open-source/free software bug tracking system, with high-profile installations at mozilla.org, GNOME, Red Hat, and NASA, among others. It features a comprehensive set of fields, attachment management, inter-bug dependencies, email notification of changes, a powerful query interface, reporting, and Web, XML, email, and console interfaces. It can be managed entirely using a Web-based UI. The user UI is customizable using templates.

Release focus: Minor security fixes

Changes:
This version fixes a data loss bug and a security issue in 2.20.4.

Author:
Dave Miller [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.68/10.00 (24 votes)

Homepage:
http://www.bugzilla.org/
Tar/GZ:
http://ftp.mozilla.org/[..]illa.org/webtools/bugzilla-2.20.5.tar.gz
Changelog:
http://www.bugzilla.org/status/changes.html
CVS tree (cvsweb):
http://lxr.mozilla.org/bugzilla2.20/source/
Bug tracker:
http://www.bugzilla.org/developers/reporting_bugs.html
Mailing list archive:
http://groups.google.com/groups?q=mozilla.support.bugzilla
Demo site:
http://landfill.bugzilla.org/bugzilla-2.20-branch/

Trove categories: [change]

[Development Status]		4 - Beta, 5 - Production/Stable, 6 - Mature
[Intended Audience]		Developers, Quality Engineers
[License]		OSI Approved :: Mozilla Public License (MPL)
[Programming Language]		Perl
[Topic]		Database :: Front-Ends, Information Management :: Issue Tracking, Office/Business, Software Development :: Bug Tracking, Software Development :: Quality Assurance

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
3.0 Stable	3.0.5	25-Aug-2008	Mozilla Public License (MPL)
Development (3.2)	3.2rc1	25-Aug-2008	Mozilla Public License (MPL)
Old (2.18) No longer supported; please don't use.	2.18.6	19-Oct-2006	Mozilla Public License (MPL)
Old (2.20)	2.20.5	24-Aug-2007	Mozilla Public License (MPL)
Old (2.22)	2.22.5	25-Aug-2008	Mozilla Public License (MPL)

 Releases

Version	Focus	Date
2.20.5	Minor security fixes	24-Aug-2007 07:37
2.20.4	Minor security fixes	03-Feb-2007 02:25
2.20.3	Minor security fixes	19-Oct-2006 22:14
2.20.2	Minor bugfixes	23-Apr-2006 09:21
2.20.1	Major bugfixes	25-Feb-2006 08:51

 Articles referencing this project

• Debian: New bugzilla packages fix several vulnerabilities
  by Patrick Lenz , in Security
  Sun, Nov 19th 2006 05:29
  
• Debian: New bugzilla packages fix unauthorized data modification
  by Patrick Lenz , in Security
  Thu, Jan 16th 2003 08:16
  
• Debian: New bugzilla packages fix cross site scripting problem
  by Patrick Lenz , in Security
  Mon, Dec 30th 2002 23:50
  
• Debian: New bugzilla packages fix privilege escalation
  by Patrick Lenz , in Security
  Wed, Oct 9th 2002 11:57
  
• Red Hat: New bugzilla packages available
  by Patrick Lenz , in Security
  Wed, Sep 12th 2001 10:15
  

 Comments

[»] Bugzilla code...
by Aaron Sherman - Aug 28th 2001 06:37:01

Bugzilla is a great system, but is made up of some of the worst Perl code I've ever seen. It's not modular. It uses techniques that would have made Perl 4 blush for sharing global variables. There's just too much to know where to start.

What I'm thinking of doing is re-writing the whole thing. It needs to use CGI.pm. It also needs a lot of the code turned into modules.

Problem is, the database schema needs to be re-written too (no primary keys on most tables, different names for the same value in multiple places, etc), but that presents an upgrade nightmare. Perhaps it will require a transition tool that just creates a new database with a new name and copies your old data...

I say all of this, because I've just tried to write some simple tools on top of bugzilla, and while I was able to, it was painful....

[reply] [top]

[»] Re: Bugzilla code...
by Dave Miller - Aug 29th 2001 03:06:40


> Bugzilla is a great system, but is made
> up of some of the worst Perl code I've
> ever seen. It's not modular. It uses
> techniques that would have made Perl 4
> blush for sharing global variables.
There is an effort underway to fix these problems, and several of them have been recently. If you're planning on rewriting it, why not help out? We'd welcome the assistance at cleaning it up. Discuss this on netscape.public.mozilla.webtools or drop in on the #mozwebtools channel on irc.mozilla.org.

[reply] [top]

---

[»] Re: Bugzilla code...
by Gervase Markham - Aug 8th 2002 16:45:35

Bugzilla is a great system, but is made
up of some of the worst Perl code I've
ever seen. It's not modular. It uses
techniques that would have made Perl 4
blush for sharing global variables.
There's just too much to know where to
start. This is far less true now than it ever was. The UI is templatised, and the main CGIs were rewritten in the process for clarity and style. Bugzilla has come a long way since this comment was posted.

Gerv

[reply] [top]

---

[»] Hosted BugZilla Application on public server
by Elian Carsenat - Dec 19th 2000 12:15:30

BugTracker.com hosts a bugzilla application, where you can configure your own software project bug tracking, since 99. Try it out before installing bugzilla. See the hosted bugzilla and the documentation

(note: if you need the _latest_ bugzilla features, then get the software from mozilla.org)

[reply] [top]

[»] Re: Hosted BugZilla Application on public server
by Gervase Markham - Feb 22nd 2002 07:12:46


> BugTracker.com hosts a bugzilla
> application, where you can configure
> your own software project bug tracking,
> since 99.
Not any more, it seems :-) Host not found...

Gerv



[reply] [top]

---

[»] Outstanding!
by ZuperDee - May 24th 1999 23:39:00

I must say, I think Bugzilla is easily the BEST bug tracking system out there. I know there are others like GNATS and Jitterbug, but IMHO, Bugzilla beats them hands-down. Bugzilla is by far the most complete system I've seen, and it easily beats GNATS and Jitterbug in terms of ease-of-use.

[reply] [top]