[Bug 1141017] New: installer logs contain user password
http://bugzilla.suse.com/show_bug.cgi?id=1141017 Bug ID: 1141017 Summary: installer logs contain user password Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers@suse.de Reporter: msuchanek@suse.com QA Contact: jsrain@suse.com Found By: --- Blocker: --- y2log-djV3TE/YaST2/yast-installation-logs/YaST2/y2log: 'text_userpassword' -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1141017
http://bugzilla.suse.com/show_bug.cgi?id=1141017#c1
Steffen Winterfeldt
http://bugzilla.suse.com/show_bug.cgi?id=1141017
http://bugzilla.suse.com/show_bug.cgi?id=1141017#c2
--- Comment #2 from Michal Suchanek
http://bugzilla.suse.com/show_bug.cgi?id=1141017
http://bugzilla.suse.com/show_bug.cgi?id=1141017#c3
Fabian Vogt
Created attachment 810015 [details] yast log
Excerpt from y2log-1: 'text_userpassword' => 'koli67p[', 'type' => 'local', 'uid' => 'hramrach', 'uidNumber' => 1000, 'userPassword' => '*****', -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1141017
http://bugzilla.suse.com/show_bug.cgi?id=1141017#c4
Steffen Winterfeldt
http://bugzilla.suse.com/show_bug.cgi?id=1141017
David Diaz
http://bugzilla.suse.com/show_bug.cgi?id=1141017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1141017
http://bugzilla.suse.com/show_bug.cgi?id=1141017#c6
--- Comment #6 from Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1141017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1141017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1141017
http://bugzilla.suse.com/show_bug.cgi?id=1141017#c7
--- Comment #7 from Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1141017
Swamp Workflow Management
https://bugzilla.suse.com/show_bug.cgi?id=1141017
https://bugzilla.suse.com/show_bug.cgi?id=1141017#c19
Ancor Gonzalez Sosa
https://bugzilla.suse.com/show_bug.cgi?id=1141017
https://bugzilla.suse.com/show_bug.cgi?id=1141017#c20
--- Comment #20 from David Diaz
This is still in state "REOPENED" although I think the fixes were released long ago. Right?
Right. As said in comment #5 I reopened and assigned it to the security team when backporting fixes to SP1 in https://github.com/yast/yast-users/pull/212 I guess it can be closed. -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply@novell.com
-
bugzilla_noreply@suse.com