Re: mantis security upgrade breaks user configuration

2003-07-07 Thread Noah L. Meyerhans
On Thu, Jul 03, 2003 at 02:26:12PM +0200, Alexander Meyer wrote: > i learned from the debian-security-announce mailinglist that mantis (a > php bugtracking system) has insecure permissions on the configfile that > stores the database password. so i did an 'apt-get update ;apt-get > upgrade' and was

Re: mantis security upgrade breaks user configuration

2003-07-03 Thread Colin Watson
On Thu, Jul 03, 2003 at 02:26:12PM +0200, Alexander Meyer wrote: > i learned from the debian-security-announce mailinglist that mantis (a > php bugtracking system) has insecure permissions on the configfile that > stores the database password. so i did an 'apt-get update ;apt-get > upgrade' and was