[SECURITY] [DLA 390-1] dbconfig-common security update

2016-01-15T14:09:16
ID DEBIAN:DLA-390-1:6713F
Type debian
Reporter Debian
Modified 2016-01-15T14:09:16

Description

Package : dbconfig-common Version : 1.8.46+squeeze.1 CVE ID : NA Debian Bug : 805638

It was discovered that dbconfig-common could, depending on the local umask, make PostgreSQL database backups that were readable by other users than the database owner. The issue is fixed in version 1.8.46+squeeze.1. Access rights to existing database backups (not only for PostgreSQL) will be limited to the owner of the backup during the upgrade of dbconfig-common to this version. Future upgrades will not change access rights in case the local administrator has specific requirements.

dbconfig-common is a Debian helper package that is used by a number of packages to manage the corresponding database.