Bug#833885: gbrowse: ships a deterministic/predictable OpenID constumer secret

2016-12-14 Thread olivier sallou
Le mer. 14 déc. 2016 à 10:41, olivier sallou a écrit : > Le mer. 14 déc. 2016 à 10:19, Andreas Tille a écrit : > > Hi, > > as far as I can see the solution for this issue would be to use a > symlink for /usr/share/perl5/GBrowse/ConfigData.pm pointing to something > like /etc/gbrowse/ConfigData.p

Bug#833885: gbrowse: ships a deterministic/predictable OpenID constumer secret

2016-12-14 Thread olivier sallou
Le mer. 14 déc. 2016 à 10:19, Andreas Tille a écrit : > Hi, > > as far as I can see the solution for this issue would be to use a > symlink for /usr/share/perl5/GBrowse/ConfigData.pm pointing to something > like /etc/gbrowse/ConfigData.pm while the file > /etc/gbrowse/ConfigData.pm will be create

Bug#833885: gbrowse: ships a deterministic/predictable OpenID constumer secret

2016-12-14 Thread Andreas Tille
Hi, as far as I can see the solution for this issue would be to use a symlink for /usr/share/perl5/GBrowse/ConfigData.pm pointing to something like /etc/gbrowse/ConfigData.pm while the file /etc/gbrowse/ConfigData.pm will be created in postinst. Is this correct and will somebody of the other Uplo

Bug#833885: gbrowse: ships a deterministic/predictable OpenID constumer secret

2016-08-09 Thread Chris Lamb
Package: gbrowse Version: 2.54+dfsg-7 Severity: normal Tags: security User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi, gbrowse ships an OpenID consumer secret in /usr/share/perl5/GBrowse/ConfigData.pm: {