anthill looks like a fairly faithful clone of bugzilla in php. hopefully minus the security holes. but it's used by the mandrakesoft security team, so there may be hope.