Debian DLA-390-1 : dbconfig-common security update

high Nessus Plugin ID 87958

Language:

Synopsis

The remote Debian host is missing a security update.

Description

It was discovered that dbconfig-common could, depending on the local umask, make PostgreSQL database backups that were readable by other users than the database owner. The issue is fixed in version 1.8.46+squeeze.1. Access rights to existing database backups (not only for PostgreSQL) will be limited to the owner of the backup during the upgrade of dbconfig-common to this version. Future upgrades will not change access rights in case the local administrator has specific requirements.

dbconfig-common is a Debian helper package that is used by a number of packages to manage the corresponding database.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Upgrade the affected dbconfig-common package.

Plugin Details

Severity: High

ID: 87958

File Name: debian_DLA-390.nasl

Version: 2.3

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 1/18/2016

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:dbconfig-common, cpe:/o:debian:debian_linux:6.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 1/15/2016

Detections

Analytics