Updated bugzilla packages fix security vulnerability:

Some code in Bugzilla does not properly utilize 3 arguments form
for open() and it is possible for an account with editcomponents
permissions to inject commands into product names and other attributes
(CVE-2014-8630).