https://bugs.documentfoundation.org/show_bug.cgi?id=147022
Bug ID: 147022
Summary: readable previews of last recently used files are
shown even if the file disappeared
Product: LibreOffice
Version: 6.4.7.2 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: LibreOffice
Assignee: [email protected]
Reporter: [email protected]
Description:
As a normal user I want to save documents on a encrypted file system and be
sure that after unmounting the filesystem, data is protected. Similar, when I
delete a file, I do not want to see its contents anymore (without special
tools).
But as I just opened libreoffice, I saw readable previews of LRU documents (in
my case: PIN numbers of credit cards^^).
Steps to Reproduce:
1. save file on a stick with secrets
2. close libre office
3. unmount stick
4. open libre office
5. inspect welcome screen
Actual Results:
you will be able to read the secrets
Expected Results:
do not expose file contents of non existing/readable files.
Reproducible: Always
User Profile Reset: No
Additional Info:
I do not know if libreOffice uses tmp files (on systems/users temp folder!?) -
if so it shouldnt.
--
You are receiving this mail because:
You are the assignee for the bug.
