Your message dated Wed, 18 Jan 2012 12:45:01 +0100
with message-id <[email protected]>
and subject line fixed in new upstream release (0.16)
has caused the Debian Bug report #566747,
regarding picard: bogusly ``encrypted'' password is world readable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
566747: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566747
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: picard
Version: 0.11-2.1
Severity: normal
The musicbrainz password is rot13 ``encoded'' and then stored in the
.config/MusicBrainz/Picard.conf file with 0644 permissions. 0600 should
probably be used instead, or some other scheme for storing the password.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.30-2-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages picard depends on:
ii libavcodec52 4:0.5+svn20090706-2+b1 ffmpeg codec library
ii libavformat52 4:0.5+svn20090706-2+b1 ffmpeg file format library
ii libc6 2.10.2-2 GNU C Library: Shared libraries
ii libdiscid0 0.2.2-1 Library for creating MusicBrainz D
ii libfftw3-3 3.2.2-1 library for computing Fast Fourier
ii libgcc1 1:4.4.2-9 GCC support library
ii libofa0 0.9.3-3.1 Library for acoustic fingerprintin
ii libstdc++6 4.4.2-9 The GNU Standard C++ Library v3
ii python 2.5.4-5 An interactive high-level object-o
ii python-mutagen 1.15-2 audio metadata editing library
ii python-qt4 4.6-1 Python bindings for Qt4
ii python-support 1.0.6 automated rebuilding support for P
picard recommends no packages.
picard suggests no packages.
-- no debconf information
Regards,
Thomas
--- End Message ---
--- Begin Message ---
Source: picard
Source-Version: 0.16-1
from Charlie's RFS (0.16-2):
Additional bugs closed by the new upstream release:
- Picard no longer segfaults when fingerprinting files, fixed upstream.
Closes: #537083, #609316
- CD lookup feature works as expected, fixed upstream. Closes: #459504
- PUID lookup works as expected, fixed upstream. Closes: #619156
- Password information is no longer stored in
/.config/MusicBrainz/Picard.conf, fixed upstream. Closes: #566747
- Saving files no longer segfaults, fixed upstream. Closes: #557132
- Picard now uses an updated version mutagen which is used to write ID3
tags. Closes: #584420
--- End Message ---
