Your message dated Mon, 26 Oct 2020 08:33:26 +0000
with message-id <[email protected]>
and subject line Bug#965066: fixed in googler 4.3.1-1
has caused the Debian Bug report #965066,
regarding googler: leaks MAC address
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
965066: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965066
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: googler
Version: 4.1-1

Googler does this:

  self._query_dict = {
       # ...
       'sei': 
base64.encodebytes(uuid.uuid1().bytes).decode("ascii").rstrip('=\n').replace('/',
 '_'),
  }

This may leak the machine's MAC address to Google.
Please use random-based uuid.uuid4() instead.


-- System Information:
Architecture: i386

Versions of packages googler depends on:
ii  python3  3.8.2-3

--
Jakub Wilk

--- End Message ---
--- Begin Message ---
Source: googler
Source-Version: 4.3.1-1
Done: =?utf-8?b?U1ogTGluICjmnpfkuIrmmbop?= <[email protected]>

We believe that the bug you reported is fixed in the latest version of
googler, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
SZ Lin (林上智) <[email protected]> (supplier of updated googler package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 26 Oct 2020 16:15:57 +0800
Source: googler
Architecture: source
Version: 4.3.1-1
Distribution: unstable
Urgency: medium
Maintainer: SZ Lin (林上智) <[email protected]>
Changed-By: SZ Lin (林上智) <[email protected]>
Closes: 965066
Changes:
 googler (4.3.1-1) unstable; urgency=medium
 .
   * Import new upstream version
   * Fix MAC address leak issue (Closes: #965066)
   * Mark patch as not-needed in the Forwarded header
Checksums-Sha1:
 97e73521c5173265c6ef9647bcbbe43c28b2daef 1838 googler_4.3.1-1.dsc
 5ba0b3ffbb7c3710b32d231f435b71cbd0aa3e00 82411 googler_4.3.1.orig.tar.gz
 137184039c6a4fe40895df876ef6c4bb0ea39b47 3684 googler_4.3.1-1.debian.tar.xz
 e787f888097918d2278b898bf7e2ea7729db4fc8 6403 googler_4.3.1-1_amd64.buildinfo
Checksums-Sha256:
 951ec1e9b2bbc4a34e7396c3f6bbd4f8d3086142560feba100d3decd0a15841a 1838 
googler_4.3.1-1.dsc
 f756182ed383050cbdaac8ee4f02c904ca26f76a727f3ec58cc8ab6a8cba3f23 82411 
googler_4.3.1.orig.tar.gz
 37385ea7e414682d641064c6edea3ba264b9f413c19726140aeedae8c228b9ca 3684 
googler_4.3.1-1.debian.tar.xz
 adb6c3912782e824975bbb280a9df2f19829f4e55249a11d65d78ab4a16bdc1a 6403 
googler_4.3.1-1_amd64.buildinfo
Files:
 593691efedf2b5bcb3644010131dfe73 1838 misc optional googler_4.3.1-1.dsc
 d99fd2fa161f1236dd5e1304cdc49a4a 82411 misc optional googler_4.3.1.orig.tar.gz
 3129f9d9ba54076c55c036a6f2010d21 3684 misc optional 
googler_4.3.1-1.debian.tar.xz
 520f09ff5ff6a36864f7ef72febef3b5 6403 misc optional 
googler_4.3.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=v+Xs
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to