Return-Path: X-Original-To: apmail-openoffice-dev-archive@www.apache.org Delivered-To: apmail-openoffice-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id AF84818446 for ; Sun, 21 Feb 2016 14:05:59 +0000 (UTC) Received: (qmail 31304 invoked by uid 500); 21 Feb 2016 14:05:59 -0000 Delivered-To: apmail-openoffice-dev-archive@openoffice.apache.org Received: (qmail 31227 invoked by uid 500); 21 Feb 2016 14:05:59 -0000 Mailing-List: contact dev-help@openoffice.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@openoffice.apache.org Delivered-To: mailing list dev@openoffice.apache.org Received: (qmail 31216 invoked by uid 99); 21 Feb 2016 14:05:59 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 21 Feb 2016 14:05:59 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id C38FEC373A for ; Sun, 21 Feb 2016 14:05:58 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.993 X-Spam-Level: X-Spam-Status: No, score=0.993 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-0.006] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id 7Mt7XR36guN1 for ; Sun, 21 Feb 2016 14:05:57 +0000 (UTC) Received: from mailout01.t-online.de (mailout01.t-online.de [194.25.134.80]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id D34EA5F60D for ; Sun, 21 Feb 2016 14:05:56 +0000 (UTC) Received: from fwd37.aul.t-online.de (fwd37.aul.t-online.de [172.20.27.137]) by mailout01.t-online.de (Postfix) with SMTP id 2D63A80F49 for ; Sun, 21 Feb 2016 15:05:50 +0100 (CET) Received: from [192.168.15.250] (rAeBHmZDQhDfnw5aft1tn8fd5SenutVw36Ewjg4QWuqGciJxQGznLT2tJgwFOARw2P@[91.5.20.70]) by fwd37.t-online.de with (TLSv1.2:ECDHE-RSA-AES256-SHA encrypted) esmtp id 1aXUdw-0cM2wy0; Sun, 21 Feb 2016 15:05:48 +0100 Reply-To: villeroy@t-online.de To: dev@openoffice.apache.org From: "=?UTF-8?Q?Andreas_S=c3=a4ger?=" Subject: Question on Issue 116295 X-Enigmail-Draft-Status: N1111 Message-ID: <56C9C43B.2070200@t-online.de> Date: Sun, 21 Feb 2016 15:05:47 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-ID: rAeBHmZDQhDfnw5aft1tn8fd5SenutVw36Ewjg4QWuqGciJxQGznLT2tJgwFOARw2P X-TOI-MSGID: 9cc510ae-5478-4175-ac5b-00956cafddb5 Hi, There is a known security issue affecting users who use the mail merge wizard in spammer's mode (serial letters as email attachments). The wizard stores the mail account confidentials as clear text in regmod.xcu. > https://bz.apache.org/ooo/show_bug.cgi?id=116295 Could it be that we already have a password protected and hopefully encrypted container for network related passwords? I mean Tools>Options...Security "Passwords for web connections" I have difficulties diffing registrymodifications.xcu so I can not find out by myself. Greetings, Andreas --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org For additional commands, e-mail: dev-help@openoffice.apache.org