[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

--- Comment #9 from QA Administrators  ---
Dear michele,

To make sure we're focusing on the bugs that affect our users today,
LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed
bugs which have not been touched for over a year.

There have been thousands of bug fixes and commits since anyone checked on this
bug report. During that time, it's possible that the bug has been fixed, or the
details of the problem have changed. We'd really appreciate your help in
getting confirmation that the bug is still present.

If you have time, please do the following:

Test to see if the bug is still present with the latest version of LibreOffice
from https://www.libreoffice.org/download/

If the bug is present, please leave a comment that includes the information
from Help - About LibreOffice.

If the bug is NOT present, please set the bug's Status field to
RESOLVED-WORKSFORME and leave a comment that includes the information from Help
- About LibreOffice.

Please DO NOT

Update the version field
Reply via email (please reply directly on the bug tracker)
Set the bug's Status field to RESOLVED - FIXED (this status has a particular
meaning that is not 
appropriate in this case)


If you want to do more to help you can test to see if your issue is a
REGRESSION. To do so:
1. Download and install oldest version of LibreOffice (usually 3.3 unless your
bug pertains to a feature added after 3.3) from
https://downloadarchive.documentfoundation.org/libreoffice/old/

2. Test your bug
3. Leave a comment with your results.
4a. If the bug was present with 3.3 - set version to 'inherited from OOo';
4b. If the bug was not present in 3.3 - add 'regression' to keyword


Feel free to come ask questions or to say hello in our QA chat:
https://web.libera.chat/?settings=#libreoffice-qa

Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-UntouchedBug

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

--- Comment #8 from QA Administrators  ---
Dear michele,

To make sure we're focusing on the bugs that affect our users today,
LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed
bugs which have not been touched for over a year.

There have been thousands of bug fixes and commits since anyone checked on this
bug report. During that time, it's possible that the bug has been fixed, or the
details of the problem have changed. We'd really appreciate your help in
getting confirmation that the bug is still present.

If you have time, please do the following:

Test to see if the bug is still present with the latest version of LibreOffice
from https://www.libreoffice.org/download/

If the bug is present, please leave a comment that includes the information
from Help - About LibreOffice.

If the bug is NOT present, please set the bug's Status field to
RESOLVED-WORKSFORME and leave a comment that includes the information from Help
- About LibreOffice.

Please DO NOT

Update the version field
Reply via email (please reply directly on the bug tracker)
Set the bug's Status field to RESOLVED - FIXED (this status has a particular
meaning that is not 
appropriate in this case)


If you want to do more to help you can test to see if your issue is a
REGRESSION. To do so:
1. Download and install oldest version of LibreOffice (usually 3.3 unless your
bug pertains to a feature added after 3.3) from
https://downloadarchive.documentfoundation.org/libreoffice/old/

2. Test your bug
3. Leave a comment with your results.
4a. If the bug was present with 3.3 - set version to 'inherited from OOo';
4b. If the bug was not present in 3.3 - add 'regression' to keyword


Feel free to come ask questions or to say hello in our QA chat:
https://web.libera.chat/?settings=#libreoffice-qa

Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-UntouchedBug

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

Xisco Faulí  changed:

   What|Removed |Added

 CC||sberg...@redhat.com,
   ||xiscofa...@libreoffice.org

--- Comment #7 from Xisco Faulí  ---
@Stephan, I thought you could be interested in this issue...

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

--- Comment #6 from Marina Latini (CIB)  ---
The issue is still present in:

Version: 6.2.0.0.alpha0+
Build ID: e79dd394deedaeed122717700077b77d94360c12
CPU threads: 4; OS: Linux 4.16; UI render: default; VCL: kde4; 
Locale: it-IT (it_IT.UTF-8); Calc: group threaded

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

--- Comment #5 from QA Administrators  ---
** Please read this message in its entirety before responding **

To make sure we're focusing on the bugs that affect our users today,
LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed
bugs which have not been touched for over a year.

There have been thousands of bug fixes and commits since anyone checked on this
bug report. During that time, it's possible that the bug has been fixed, or the
details of the problem have changed. We'd really appreciate your help in
getting confirmation that the bug is still present.

If you have time, please do the following:

Test to see if the bug is still present with the latest version of LibreOffice
from https://www.libreoffice.org/download/

If the bug is present, please leave a comment that includes the information
from Help - About LibreOffice.

If the bug is NOT present, please set the bug's Status field to
RESOLVED-WORKSFORME and leave a comment that includes the information from Help
- About LibreOffice.

Please DO NOT

Update the version field
Reply via email (please reply directly on the bug tracker)
Set the bug's Status field to RESOLVED - FIXED (this status has a particular
meaning that is not 
appropriate in this case)


If you want to do more to help you can test to see if your issue is a
REGRESSION. To do so:
1. Download and install oldest version of LibreOffice (usually 3.3 unless your
bug pertains to a feature added after 3.3) from
http://downloadarchive.documentfoundation.org/libreoffice/old/

2. Test your bug
3. Leave a comment with your results.
4a. If the bug was present with 3.3 - set version to 'inherited from OOo';
4b. If the bug was not present in 3.3 - add 'regression' to keyword


Feel free to come ask questions or to say hello in our QA chat:
https://kiwiirc.com/nextclient/irc.freenode.net/#libreoffice-qa

Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-UntouchedBug

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

--- Comment #4 from Mike Kaganski  ---
FYI: LibreOffice already has a password manager used e.g. with CMIS/WebDAV.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

Aron Budea  changed:

   What|Removed |Added

   Keywords||security

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

Gabor Kelemen  changed:

   What|Removed |Added

   See Also||https://bugs.documentfounda
   ||tion.org/show_bug.cgi?id=10
   ||4992

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

Buovjaga  changed:

   What|Removed |Added

 Blocks||102998


Referenced Bugs:

https://bugs.documentfoundation.org/show_bug.cgi?id=102998
[Bug 102998] [META] Mail merge bugs and enhancements
-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

--- Comment #3 from Marina Latini  ---
(In reply to Cor Nouws from comment #2)
> (In reply to Marina Latini from comment #1)
> 
> > Suggestions:
> > a) Add the information to the help page
> > b) Disallow the password saving
> > c) implement a master password manager (like kwalletmanager, GNOME Keyring
> > Manager/Seahorse for GNU/Linux or Keychain Access for OSX or Credential
> > Manager for Windows).
> 
> So that should be three issues :) ?

Hi Cor.

The main problem is that the password is stored in clear text and the user
doesn't know this.

If this report is considered as a real bug (not a feature ;) ) I could consider
to split the report into 3 different issues.

Please, let me know the right steps :)

Best,
Marina

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

Cor Nouws  changed:

   What|Removed |Added

 CC||c...@nouenoff.nl
   Hardware|x86-64 (AMD64)  |All
Version|4.2.8.2 release |Inherited From OOo
 OS|Linux (All) |All
   Severity|normal  |major

--- Comment #2 from Cor Nouws  ---
(In reply to Marina Latini from comment #1)

> Suggestions:
> a) Add the information to the help page
> b) Disallow the password saving
> c) implement a master password manager (like kwalletmanager, GNOME Keyring
> Manager/Seahorse for GNU/Linux or Keychain Access for OSX or Credential
> Manager for Windows).

So that should be three issues :) ?

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96672] Outgoing mail server password in clear text inside the registrymodifications.xcu file

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96672

Marina Latini  changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEW
 Ever confirmed|0   |1

--- Comment #1 from Marina Latini  ---
ClearTextPassword

confirmed on:

* Version: 4.4.7.2
* Build ID: f3153a8b245191196a4b6b9abd1d0da16eead600
* Locale: it_IT.UTF-8
* OS: openSUSE Tumbleweed (20151124) (x86_64)

and 

* Version: 5.2.0.0.alpha0+
* Build ID: 0b1da98da44bc9acb9e42a5cd1842adf9d82a415
* CPU Threads: 4; OS Version: Linux 4.3; UI Render: default; 
* TinderBox: Linux-rpm_deb-x86_64@70-TDF, Branch:master, Time:
2015-12-22_05:54:37
* Locale: it-IT (it_IT.UTF-8)
* OS: openSUSE Tumbleweed (20151124) (x86_64)

The password is stored in cleartext and the help page:
https://help.libreoffice.org/Common/Server_Authentication 
omits this information.

Suggestions:
a) Add the information to the help page
b) Disallow the password saving
c) implement a master password manager (like kwalletmanager, GNOME Keyring
Manager/Seahorse for GNU/Linux or Keychain Access for OSX or Credential Manager
for Windows).

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs