| Bug ID | 1173881 |
|---|---|
| Summary | tuxguitar package differs from .DSA file |
| Classification | openSUSE |
| Product | openSUSE Tumbleweed |
| Version | Current |
| Hardware | Other |
| OS | openSUSE Factory |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Other |
| Assignee | fstrba@suse.com |
| Reporter | bwiedemann@suse.com |
| QA Contact | qa-bugs@suse.de |
| CC | opensuse.lietuviu.kalba@gmail.com |
| Blocks | 1062303 |
| Found By | Development |
| Blocker | --- |
While working on reproducible builds for openSUSE, I found that our tuxguitar package differs for every build. build-compare pkg-diff shows that /usr/share/tuxguitar/plugins/tuxguitar-viewer.jar/META-INF/TUXGUITA.DSA differs Is that .DSA file required for something? It cannot really help security in this way, can it? btw: tigervnc has a similar problem with its /usr/share/vnc/classes/VncViewer.jar/META-INF/TIGERVNC.RSA