Processed: Re: Bug#962629: rainloop: Rainloop stores passwords in cleartext in logfile

Processing control commands: > tag -1 unreproducible Bug #962629 {Done: Daniel Ring } [rainloop] rainloop: Rainloop stores passwords in cleartext in logfile Added tag(s) unreproducible. -- 962629: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962629 Debian Bug Tracking System Contact ow...@

Bug#962629: rainloop: Rainloop stores passwords in cleartext in logfile

Control: tag -1 unreproducible On Wed, 10 Jun 2020 at 23:19:41 +0200, Marco Herrn wrote: > When writing into a logfile, rainloop writes the passwords of all > login attempts (successful or not) into the logfile in cleartext. FWIW I'm not able to reproduce this with the version from Debian buster

Bug#962629: [Pkg-javascript-devel] Bug#962629: rainloop: Rainloop stores passwords in cleartext in logfile

Hello Daniel, I don't have the possibility to try out a newer version of rainloop, but according to a recent comment on the github issue [1] this is really fixed in version 1.14.0 of rainloop. So I assume that only applies to the current stable release. Nevertheless I see this bug as grave enough

Bug#962629: [Pkg-javascript-devel] Bug#962629: rainloop: Rainloop stores passwords in cleartext in logfile

Hello Marco, I wasn't able to reproduce this issue in the current version of Rainloop. Passwords were replaced by asterisks in the logs with the hide_passwords option enabled (the default). Could you please check to see if package version 1.14.0-1, currently in testing/unstable, resolves the