Description of problem: From Novell Bugzilla (see URL): The groupwise module of korganizer stores the password in plain text in .kde/share/config/kresources_kcal_groupwiserc and there is no way to avoid that: if you delete the password from this file, starting korganizer fails with an "invalid password" message. It should at least be possible to enter the password "on demand". ... and/or offer use of kwallet Additional information: This, by itself is not a security issue, but would be nice to have fixed.
Final Freeze is in effect now. Security fixes almost certainly warrant a freeze break, so in case you build a fix for this, mail release engineering as described here: [2] [1] https://www.redhat.com/archives/fedora-devel-announce/2008-April/msg00007.html [2] http://fedoraproject.org/wiki/ReleaseEngineering/FinalFreezePolicy Thanks!
Changing version to '9' as part of upcoming Fedora 9 GA. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping
There has been no movement on this issue. Do we want to address this or send it upstream?
The information we've requested above is required in order to review this problem report further and diagnose or fix the issue if it is still present. Since it has been thirty days or more since we first requested additional information, we're assuming the problem is either no longer present in the current Fedora release, or that there is no longer any interest in tracking the problem. Setting status to "CLOSED INSUFFICIENT_DATA". If you still experience this problem after updating to our latest Fedora release and can provide the information previously requested, please feel free to reopen the bug report. Thank you in advance.
I'd say this does not qualify as a bug. If you want more secure password storage methods to be used (e.g. KWallet, which IMHO is the right tool for the job), the right place to address this issue is upstream.