https://bugs.documentfoundation.org/show_bug.cgi?id=119811

Olivier Tilloy <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |NEW
     Ever confirmed|0                           |1
         Resolution|DUPLICATE                   |---

--- Comment #2 from Olivier Tilloy <[email protected]> ---
I'm removing the duplicate status: bug 118593 is about loading xmlsecurity at
startup even when not needed, whereas this one is a concern about what
xmlsecurity does to access firefox's certificates DB.

I'm not a security expert but this looks like a valid concern to me, especially
since libreoffice requests write mode to cert8.db and key3.db. Is this really
needed? Is there a design doc that explains why?

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to