Debian Security Advisory 1856-1 – It was discovered that the Debian Mantis package, a web based bug tracking system, installed the database credentials in a file with world-readable permissions onto the local filesystem. This allows local users to acquire the credentials used to control the Mantis database.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/80248/dsa-1856-1.txt
Source: https://packetstormsecurity.com/files/80248/Debian-Linux-Security-Advisory-1856-1.html