Debian 9898 Published by

The following updates has been released for Debian 6 LTS:

[DLA 388-1] dwarfutils security update
[DLA 389-1] giflib security update
[DLA 390-1] dbconfig-common security update



[DLA 388-1] dwarfutils security update

Package : dwarfutils
Version : 20100214-1+deb6u1
CVE ID : CVE-2015-8750

It was discovered that there was a NULL deference in dwarfutils, a tool
to dump DWARF debug information from ELF objects.

For Debian 6 Squeeze, this issue has been fixed in dwarfutils version
20100214-1+deb6u1.

[DLA 389-1] giflib security update

Package : giflib
Version : 4.1.6-9+deb6u1
CVE ID : CVE-2015-7555
Debian Bug : 808704

It was discovered that a maliciously crafted GIF can crash the giffix
utility which is part of giflib-tools.

We recommend that you upgrade your giflib-tools package to version
4.1.6-9+deb6u1 (Debian squeeze LTS).

[DLA 390-1] dbconfig-common security update

Package : dbconfig-common
Version : 1.8.46+squeeze.1
CVE ID : NA
Debian Bug : 805638

It was discovered that dbconfig-common could, depending on the local
umask, make PostgreSQL database backups that were readable by other
users than the database owner. The issue is fixed in version
1.8.46+squeeze.1. Access rights to existing database backups (not only
for PostgreSQL) will be limited to the owner of the backup during the
upgrade of dbconfig-common to this version. Future upgrades will not
change access rights in case the local administrator has specific
requirements.

dbconfig-common is a Debian helper package that is used by a number of
packages to manage the corresponding database.