Debian DSA-1856-1 : mantis - information leak

It was discovered that the Debian Mantis package, a web-based bug tracking system, installed the database credentials in a file with world-readable permissions onto the local filesystem. This allows local users to acquire the credentials used to control the Mantis database. This updated package...