[Libreoffice-bugs] [Bug 116327] New: File recovery loses file encryption

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=116327

            Bug ID: 116327
           Summary: File recovery loses file encryption
           Product: LibreOffice
           Version: 6.0.2.1 release
          Hardware: All
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: filters and storage
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: stephen at networkplumber.org

I have a spreadsheet with lots of private data. It is stored in an encrypted
drive but for added security, have been saving it with a password (data format
xlsx)

Recently, the file was flagged for recovery by Libreoffice probably because I
shutdown without saving it. Anyway, the recovery process worked and saved the
file but the password protection was lost.

I would consider this a security bug, maybe even a CVE.

Running on Debian testing (Buster) which is version 1:6.0.2-1

Sorry not going to attach the file (for obvious reasons) but trust that
developers can reproduce it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180310/fcc5cf6e/attachment.html>