Bug#564561: Security issue: MySQL root password stored in /etc/gallery2/config.php

Package: gallery2 Followup-For: Bug #564561 There are two different places, where gallery2 ask for password to database: - during installation, this is needed by install script to create database for gallery2 - that password doesn't appear in /etc/gallery2/config.php - when gallery is

Bug#564561: Security issue: MySQL root password stored in /etc/gallery2/config.php

Package: gallery2 Version: 2.3-1 Severity: normal When configuring the gallery2 package, it asks for a Database admin user account capable of creating new databases. In other debian packages that use MySQL, the install scripts creates a new database and a new MySQL user with write access to that