@raphgro Sure, that issue/feature can be "discussable" (especially that it mixes "innocent" feature from percellite, the "innocent" feature from systemd and slightly also the .desktop file autostart.
Nevertheless, copy password to clipboard (e.g. from a password manager) should not result (in default configuration) in having it plain text in the system logs.
Thanks for changing the update type - some people do might call dnf with --security for various reasons.
This update has been submitted for testing by raphgro.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
@raphgro, it should be marked as a security update: https://github.com/rickyrockrat/parcellite/issues/79 (copied credentials were put into system logs in plain text - in default configuration, even without persisting to disk enabled)
raphgro edited this update.
debuginfo is b0rken, see test result of rpminspect
@szpak Okay but TBH user to blame if senseful data copied to clipboard without giving care. Therefore more alike security feature but no import bug.
@raphgro Sure, that issue/feature can be "discussable" (especially that it mixes "innocent" feature from percellite, the "innocent" feature from systemd and slightly also the
.desktop
file autostart. Nevertheless, copy password to clipboard (e.g. from a password manager) should not result (in default configuration) in having it plain text in the system logs.Thanks for changing the update type - some people do might call dnf with
--security
for various reasons.Years ago, there was (slightly) "similar" case with Ubuntu and users were also surprised :-) https://slashdot.org/story/06/03/13/0525254/root-password-readable-in-clear-text-with-ubuntu
This update has been submitted for stable by bodhi.
This update has been pushed to stable.