Package: filezilla
Version: 3.0.11.1-1
Severity: important

The program silently saves as plain text in it's preferences folder all used
passwords including even ssh ones. They are expected to be manually deleted
by the user, using menu option that works only when no connection is
established. No warning of any kind is issued before saving the password and
no options can be found in the preferences dialog to prevent passwords from
being written to the disk.

I know that FileZilla is originally Windows program and as such it's
developers may see this behavior as acceptable or even expected. If they
don't want to fix it adding install time warning to the Debian package may
be appropriate.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-tuxonice-fbcon (SMP w/1 CPU core; PREEMPT)
Locale: LANG=bg_BG.CP1251, LC_CTYPE=bg_BG.CP1251 (charmap=CP1251)
(ignored: LC_ALL set to bg_BG.CP1251)
Shell: /bin/sh linked to /bin/bash

Versions of packages filezilla depends on:
ii  filezilla-common              3.0.11.1-1 Architecture independent files for
ii  libc6                         2.7-12     GNU C Library: Shared libraries
ii  libgcc1                       1:4.3.1-6  GCC support library
ii  libgnutls26                   2.4.1-1    the GNU TLS library - runtime libr
ii  libidn11                      1.9-1      GNU libidn library, implementation
ii  libstdc++6                    4.3.1-6    The GNU Standard C++ Library v3
ii  libwxbase2.8-0                2.8.7.1-1  wxBase library (runtime) - non-GUI
ii  libwxgtk2.8-0                 2.8.7.1-1  wxWidgets Cross-platform C++ GUI t

Versions of packages filezilla recommends:
ii  filezilla-locales             3.0.11.1-1 Translations of filezilla

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to