Bugzilla is the most popular open source bug tracker, and the one we use at ActiveState for both public and private issue tracking.