[Libreoffice-bugs] [Bug 119811] LibreOffice 6.0.6 spies on my Firefox keychain when opening MS documents

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119811

Olivier Tilloy <olivier.tilloy at canonical.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |NEW
     Ever confirmed|0                           |1
         Resolution|DUPLICATE                   |---

--- Comment #2 from Olivier Tilloy <olivier.tilloy at canonical.com> ---
I'm removing the duplicate status: bug 118593 is about loading xmlsecurity at
startup even when not needed, whereas this one is a concern about what
xmlsecurity does to access firefox's certificates DB.

I'm not a security expert but this looks like a valid concern to me, especially
since libreoffice requests write mode to cert8.db and key3.db. Is this really
needed? Is there a design doc that explains why?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200210/f8269d75/attachment.htm>