[Pkg-kde-extras] Bug#721826: digikam: saves Mysql password in plain text

[Johannes Rohr]

Package: digikam
Version: 4:3.1.0-4
Severity: normal

Digikam saves the mysql password in ~/.kde/share/config/digikamrc. Instead it should be stored securely in kdewallet

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (450, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.9-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages digikam depends on:
ii  digikam-data          4:3.1.0-4
ii  digikam-private-libs  4:3.1.0-4
ii  kde-runtime           4:4.10.5-1
ii  libc6                 2.17-92
ii  libgcc1               1:4.8.1-2
ii  libgphoto2-2          2.4.14-2+b1
ii  libgphoto2-port0      2.4.14-2+b1
ii  libkdcraw22           4:4.10.5-1
ii  libkdecore5           4:4.10.5-1
ii  libkdeui5             4:4.10.5-1
ii  libkexiv2-11          4:4.10.5-1
ii  libkhtml5             4:4.10.5-1
ii  libkio5               4:4.10.5-1
ii  libkipi10             4:4.10.5-1
ii  libknotifyconfig4     4:4.10.5-1
ii  libkparts4            4:4.10.5-1
ii  libphonon4            4:4.6.0.0-3
ii  libqt4-dbus           4:4.8.5+dfsg-3
ii  libqt4-sql            4:4.8.5+dfsg-3
ii  libqt4-sql-sqlite     4:4.8.5+dfsg-3
ii  libqt4-xml            4:4.8.5+dfsg-3
ii  libqtcore4            4:4.8.5+dfsg-3
ii  libqtgui4             4:4.8.5+dfsg-3
ii  libsolid4             4:4.10.5-1
ii  libstdc++6            4.8.1-2
ii  libthreadweaver4      4:4.10.5-1
ii  perl                  5.14.2-21
ii  phonon                4:4.6.0.0-3

Versions of packages digikam recommends:
ii  chromium [www-browser]   29.0.1547.57-3
ii  iceweasel [www-browser]  23.0.1-1
ii  kipi-plugins             4:3.1.0-4
ii  konqueror [www-browser]  4:4.10.5-1
ii  mplayerthumbs            4:4.10.5-1
ii  w3m [www-browser]        0.5.3-11

Versions of packages digikam suggests:
pn  digikam-doc  <none>

-- no debconf information