Major security flaw in Bugzilla discovered, fixed, and revealed 6 months later (bugzilla.mozilla.org)