From unknown Sun Aug 17 22:02:43 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#49289 <49289@debbugs.gnu.org> To: bug#49289 <49289@debbugs.gnu.org> Subject: Status: 28.0.50; auth-source-search may return doubly obfuscated :secret value Reply-To: bug#49289 <49289@debbugs.gnu.org> Date: Mon, 18 Aug 2025 05:02:43 +0000 retitle 49289 28.0.50; auth-source-search may return doubly obfuscated :sec= ret value reassign 49289 emacs submitter 49289 Kazuhiro Ito severity 49289 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Jun 30 06:18:56 2021 Received: (at submit) by debbugs.gnu.org; 30 Jun 2021 10:18:56 +0000 Received: from localhost ([127.0.0.1]:56514 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyXJ2-0000mA-JS for submit@debbugs.gnu.org; Wed, 30 Jun 2021 06:18:56 -0400 Received: from lists.gnu.org ([209.51.188.17]:57984) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyXJ1-0000m3-24 for submit@debbugs.gnu.org; Wed, 30 Jun 2021 06:18:55 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:46220) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lyXJ0-0004P9-RJ for bug-gnu-emacs@gnu.org; Wed, 30 Jun 2021 06:18:54 -0400 Received: from snd10013.auone-net.jp ([106.187.245.173]:7009 helo=dmta0003.auone-net.jp) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lyXIv-0000xo-Jf for bug-gnu-emacs@gnu.org; Wed, 30 Jun 2021 06:18:53 -0400 Received: from kzhr.d1.dion.ne.jp by dmta0003.auone-net.jp with ESMTP id <20210630101841250.EQDB.44995.kzhr.d1.dion.ne.jp@dmta0003.auone-net.jp>; Wed, 30 Jun 2021 19:18:41 +0900 Date: Wed, 30 Jun 2021 19:18:37 +0900 Message-ID: <86lf6rejuq.wl--xmue@d1.dion.ne.jp> From: Kazuhiro Ito To: bug-gnu-emacs@gnu.org Subject: 28.0.50; auth-source-search may return doubly obfuscated :secret value X-Hashcash: 1:20:210630:bug-gnu-emacs@gnu.org::x1KQ2mqANQEww0Mv:00000000000000000000000000000000000000002Nwh User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI-EPG/1.14.7 (Harue) FLIM-LB/1.14.9 (=?ISO-8859-4?Q?Goj=F2?=) APEL-LB/10.8 EasyPG/1.0.0 Emacs/28.0.50 (x86_64-w64-mingw32) MULE/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Received-SPF: pass client-ip=106.187.245.173; envelope-from=kzhr@d1.dion.ne.jp; helo=dmta0003.auone-net.jp X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) When I have ~/.authinfo entry of 'mail.example.com' for user 'foo' but not user 'bar', ~/.authinfo machine mail.example.com login foo password abcdef for user other than 'foo', auth-source-search returns a function which returns a function which returns a string. (progn (require 'auth-source) (list (funcall (plist-get (car (auth-source-search :host "mail.example.com" :user "foo" :require '(:secret) :create t)) :secret)) (funcall (funcall ;; *** funcall called twice. *** (plist-get (car (auth-source-search :host "mail.example.com" :user "bar" :require '(:secret) :create t)) :secret))))) -> ("abcdef" "abcdef") I don't know whether auth-source supports multiple accounts on the same host and whether it is a feature that auth-source-search tend to return other user's password. But I think doubly obfuscated :secret value is obviously a bug. -- Kazuhiro Ito From debbugs-submit-bounces@debbugs.gnu.org Wed Jun 30 08:28:48 2021 Received: (at 49289) by debbugs.gnu.org; 30 Jun 2021 12:28:48 +0000 Received: from localhost ([127.0.0.1]:56668 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyZKi-0006Ks-43 for submit@debbugs.gnu.org; Wed, 30 Jun 2021 08:28:48 -0400 Received: from quimby.gnus.org ([95.216.78.240]:57228) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyZKf-0006KU-Ql for 49289@debbugs.gnu.org; Wed, 30 Jun 2021 08:28:46 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=sUtWgByj2lJIDYQlX2ruPsGWuRl5ArHDCxtQeiQ+uqw=; b=gTqJ+mKrCCQJLZPWKcdEg5xI/6 n+qk9zkt3oG6/IDnEvBvSqis8+EcSX9P/OF+XIMu0EpFrVRdcbVshT8rozZgM9Wxx9RE8haEWbLFz q4t1lwdmnisKVQ0AspSBxi1cbuW6KpBPebT8GlGduXc3Kwx6v0y0CGvQTfBmPwlqCK0s=; Received: from cm-84.212.220.105.getinternet.no ([84.212.220.105] helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lyZKU-0001ZO-MW; Wed, 30 Jun 2021 14:28:38 +0200 From: Lars Ingebrigtsen To: Kazuhiro Ito Subject: Re: bug#49289: 28.0.50; auth-source-search may return doubly obfuscated :secret value References: <86lf6rejuq.wl--xmue@d1.dion.ne.jp> X-Now-Playing: Green Gartside's _Tangled Man_: "Tangled Man " Date: Wed, 30 Jun 2021 14:28:34 +0200 In-Reply-To: <86lf6rejuq.wl--xmue@d1.dion.ne.jp> (Kazuhiro Ito's message of "Wed, 30 Jun 2021 19:18:37 +0900") Message-ID: <871r8j8rkd.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Kazuhiro Ito writes: > I don't know whether auth-source supports multiple accounts on the > same host and whether it is a feature that auth-source-search tend to > return other user's password. But I think doubly obfuscat [...] Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 49289 Cc: 49289@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Kazuhiro Ito writes: > I don't know whether auth-source supports multiple accounts on the > same host and whether it is a feature that auth-source-search tend to > return other user's password. But I think doubly obfuscated :secret > value is obviously a bug. I think both things are bugs, and the second happens because of the first bug. I've now pushed a fix for this to Emacs 28. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Jun 30 08:28:52 2021 Received: (at control) by debbugs.gnu.org; 30 Jun 2021 12:28:52 +0000 Received: from localhost ([127.0.0.1]:56670 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyZKm-0006L5-C0 for submit@debbugs.gnu.org; Wed, 30 Jun 2021 08:28:52 -0400 Received: from quimby.gnus.org ([95.216.78.240]:57242) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyZKh-0006KX-GS for control@debbugs.gnu.org; Wed, 30 Jun 2021 08:28:47 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=F8YhHXysa7Z6V9LSwPPjZ+mgFHnLjq01dAt9P4PVrjA=; b=sAUbNIvuYL7BgQZkdfljv4PKeb 5LHpbqBxE4nqB15o8NDt/iu45DAse+r+AGXGxxyrOjAx+WVQ8gYWjqzuSU/N2at6YW5V9ICGCKQEq UZMaFzzCvilMXmWycVFMZjaHYVstE3525TdIdPmFtKWi/nj1Yi7ORR1wYMaum3LcYkAc=; Received: from cm-84.212.220.105.getinternet.no ([84.212.220.105] helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lyZKa-0001ZT-4R for control@debbugs.gnu.org; Wed, 30 Jun 2021 14:28:42 +0200 Date: Wed, 30 Jun 2021 14:28:39 +0200 Message-Id: <87zgv77czs.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #49289 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: close 49289 28.1 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) close 49289 28.1 quit From unknown Sun Aug 17 22:02:43 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 29 Jul 2021 11:24:07 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 18 10:58:32 2024 Received: (at control) by debbugs.gnu.org; 18 Jun 2024 14:58:32 +0000 Received: from localhost ([127.0.0.1]:43864 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sJaI3-0000BB-8z for submit@debbugs.gnu.org; Tue, 18 Jun 2024 10:58:32 -0400 Received: from mout.gmx.net ([212.227.17.21]:35639) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sJaHz-0000Au-9F for control@debbugs.gnu.org; Tue, 18 Jun 2024 10:58:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de; s=s31663417; t=1718722697; x=1719327497; i=michael.albinus@gmx.de; bh=nwdDK+ZCFsticQaOX8dEUua/m3tvDk5ZUMCyRPeCyEY=; h=X-UI-Sender-Class:Date:Message-Id:To:From:Subject:cc: content-transfer-encoding:content-type:date:from:message-id: mime-version:reply-to:subject:to; b=CuJsyywY4Kqv7DTnKDDSEemurHtiRFI2Olz/RN8ErzoXM9X1QHq/jRcB5SzV7pUM E6QHWtVejwZWpb+zSuatqRjIFs+ldsWsNCQl8f/UOxVfS0i7Y3Ad5lUScuEcb4HAm 63P63RIJS9Tf11ZRTUB+cEqJ9w2PPQdFZDVgIOgZG3sF7G/h/TanAGd+wSJlPdMfp S1jAP1BZJ8kgCT2fy3OFJqTmQr9CThFxoGZqeHlcTxZJfUh+xtMuX5MSWz+Yk6MSo WG9PCBq7QmUKH1ea2Gn95vU3V9PQWd/TyhjIgixkee9pRSacN4xh+omdLKtP+oGwv FnonZP+caJQWo7Sfcw== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from gandalf.gmx.de ([185.89.38.155]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1McH5Q-1svxNE3f48-00bB4T for ; Tue, 18 Jun 2024 16:58:17 +0200 Date: Tue, 18 Jun 2024 16:58:16 +0200 Message-Id: <87cyoe8fhz.fsf@gmx.de> To: control@debbugs.gnu.org From: Michael Albinus Subject: control message for bug #49289 X-Provags-ID: V03:K1:NwmIBkKHQjaevmJdzeIWgA0dxaMCETYzM+6Mb7dwCW4xAWcxUyc 2Escf2h+gFgiMDZRH0SOSRnBCvQxOnK3DxpCQofmIYJfbxgzNFR7+UCbR9qDZXchzijMwnC BEtN4Bn6LrAEO3ok5tBGJKDjvf9Fqa0W8v3hV545Ivl+a2nkKiJnr4ILsyD3kdL5yR9y5J/ 0XM7TNr+t97BBJXKPmNmg== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:YA69EXiYRIU=;DYPXeciRvu62xKf3y/xOxUR+HFz 2V/wgid8Y5vwswSOuSBV28lJvMow3a50PtS2S/zGXoVKQNY1DVxHZmmqua0lQ+unzL+cjao08 yCPsEIBnf8H9OpkDf+QrpsaMw1VkAX8ssUIIkCQlB5RrW6RTwzbJv4nrzPxdr2pyM2gYpZD9i rIPguGvybPFKcoLIk9sGe5CMmZQrWbH70I4ay4qV8o6gKXScNdtEs2Yv75tLz64UkincbZlwK HjNIPLq5JdxShkOZfPGCoyRbAGGpU0n75WJ5IYI1doTKX+b4Z+3MILAJ/YqgozLOLfBBaDvmZ brsmXVI7mQvF79CBB5ek/lEmo+Le700ZOeqHHPalZ0flhUHuSVdFrYsB2+Y4SsxbHTpMFqh/i Taly2yVcGo53++p9NPjYY78XunOpvLv46brMPwJQKIjJX9CJ3jsOZs5ybQ1S7nUmlzfPBocY4 xEIrCgm078GCmh9hrgk9z0IRdP/eupcaFOYgCsMp5c4AJGPIq8ihgLo61FEhjGYT4FyVDCTVN 4SdPv4RCP1GPa6V5B9kkrO2BRyWncym4OekSSPUN3CToloVRIsqGEhWCSRTkorbC2+KoSZy01 ZbEm6syguSlEsNn/vdykyxvSqVzWqCTbIEZtzgxFG7K0qdZ6URBBtz2yrBkmbMgSDP9PpoHPg T8qXi2jCnewgqYHWt1qCkQV+qCJr+HFIzrGM9Z5Piml95/HOKUCcd73ENqABnPvwSVK7R6oX4 z3jtlpw+JUz658Bp8DC9Wciw0UUoKjKLIKwP4zVkZkXvMtpMJ5Tfj1U6tPK1yJdmTLtjRlXEW ZlisZl4O5VYGAFoj1Lzg2WjrTZA1Th2I16xqBVljB2gn0= X-Spam-Score: 3.6 (+++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: unarchive 49289 quit Content analysis details: (3.6 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (michael.albinus[at]gmx.de) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [185.89.38.155 listed in zen.spamhaus.org] 0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4) [212.227.17.21 listed in wl.mailspike.net] -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 RCVD_IN_MSPIKE_WL Mailspike good senders X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.9 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: unarchive 49289 quit Content analysis details: (1.9 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [185.89.38.155 listed in zen.spamhaus.org] 0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4) [212.227.17.21 listed in wl.mailspike.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (michael.albinus[at]gmx.de) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [212.227.17.21 listed in list.dnswl.org] -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 RCVD_IN_MSPIKE_WL Mailspike good senders -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager unarchive 49289 quit From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 18 11:01:13 2024 Received: (at 49289) by debbugs.gnu.org; 18 Jun 2024 15:01:13 +0000 Received: from localhost ([127.0.0.1]:43870 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sJaKf-000362-EE for submit@debbugs.gnu.org; Tue, 18 Jun 2024 11:01:13 -0400 Received: from mout.gmx.net ([212.227.15.19]:32937) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sJaKd-0002x5-Eo for 49289@debbugs.gnu.org; Tue, 18 Jun 2024 11:01:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de; s=s31663417; t=1718722860; x=1719327660; i=michael.albinus@gmx.de; bh=kuDZCjd7EZrsfR6bWauE+eskWcEucu8guRxxyrW4AH4=; h=X-UI-Sender-Class:From:To:Cc:Subject:In-Reply-To:References:Date: Message-ID:MIME-Version:Content-Type:cc:content-transfer-encoding: content-type:date:from:message-id:mime-version:reply-to:subject: to; b=tYkoAB5+ONR2Rfx3DuT+T0jvdbZuTsDcJu2V1Spfcd/Mh9JpjZRUfzjWcvMzt3yJ /OxbXHVvlnBeYTEk8DblbL76DiObsshvOMQ0yKyNC9l42NT8G/jXdhcET2cac9RIh sGghmtTLR5ulV2YQcXkWprM8DU+bODqhD26H2lp5GQ1kuDl7Bu2/izJiTJz1QQBXt i1tiLPot4R4VA7HokZg9YwqJkLj2d9O7j+7bjmkmJ1wbHNAQl6xtlg/8BZ1NssZnR t/uF1T2Up19D5y/jfVT39DGjIQ3LvGaRpbYZjMOl+5lxVzTkPPKcolAJrVYXYI0fu +hC3BQMk5npyYIKZBA== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from gandalf.gmx.de ([185.89.38.155]) by mail.gmx.net (mrgmx005 [212.227.17.190]) with ESMTPSA (Nemesis) id 1M59GA-1sKgn9438e-00H5EX; Tue, 18 Jun 2024 17:01:00 +0200 From: Michael Albinus To: Lars Ingebrigtsen Subject: Re: bug#49289: 28.0.50; auth-source-search may return doubly obfuscated :secret value In-Reply-To: <871r8j8rkd.fsf@gnus.org> (Lars Ingebrigtsen's message of "Wed, 30 Jun 2021 14:28:34 +0200") References: <86lf6rejuq.wl--xmue@d1.dion.ne.jp> <871r8j8rkd.fsf@gnus.org> Date: Tue, 18 Jun 2024 17:00:57 +0200 Message-ID: <878qz28fdi.fsf@gmx.de> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Provags-ID: V03:K1:TNEczodnpcV0hmohw6JnzThZuWQwcHmrOBIDO8zkOiUjat65Stu LNEjfacWHwbCn7hgpw36BN04p2gc0aabk4N/ywGHodSqx+hnAlfKUdwhdmVIeseuNsN2Ivz UIteCrNqGKV9mYVxtrLVpi7AtbLNbwiCjD1g7huIKIcrv7OG4GeWIXw0Z67Tu0UJWHUaL3e cfTQnVFM86EO9utV9TqOw== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:p5+6FXohOfs=;RyDeMNTm5gDR8gThpBdj19z1Psz NiIKjIM/VcXNycygtn6btQ4isLBENStCKjmEjO8vl3kQnektfWExrpsxXEu6G6icyMOCSMjAg NReUlv9Sfti1o7BAqu2FGDXF9+GfUrJkZe7KFIbbJw1vpw6EGRSu0Ch5W1jrgdAt111oHVdH/ uhPDOcycoH2gwwCSJwDV+GUU0xZyQL7IJ/oAaNAqwnsOqcMVWzH24nAKOjlwx4I2xEvYzrIMn 6vA3J37D7wDex0OjtSutKTqp6cktdeZ49oL2QGbYpSS396YIOlvV3+PYhCH3Wb/JVK2noe+vv yio2r0V/nKePsnIjvVo+AAq6clbURFjbCv4SziJUfBvOYbCiM7D4aBERfuwDAxLLVNbZDYBGj b6+wCNCIMPg43gQuZU5qwFfKtYTpEkHzqRYiR4XWtao2Na7dt9zdfet7qpG5DlTDnpfZV5zs9 EsHsvFkLzo7jq1YJrXQM2FpMl4ic45vZ91XAH9+6MbpCrfPB/dSuZMdN9s/Bp1j0Wv8Ta/Csy z6cO76OGW5mvPOkpinplCYgzcCA0fnSJR2vi+Ri2pi54ndKVOyRN3sT8WtgGC8j/JsPTBikhM TDvA/QNAPL8dFGwCzRTLomViFuSaIM4U8nZZeajmxKisqssrGIGI21bJ9E7R6k4266BHg5cPP 8GmNJv2VbWgUk013yAN/labH+amPaSpPF6jIPL020JNc5h8nPIFHwC3vpauPjodWm3JwmE1ru S86JSW6QQ+sE94qmGpJ+C9YOkxodbStLfOsF16LSPtOCYAcwPbsgKLkmg8lGMuqY0wSRQWdGe OPfEMXm1hEb0WK3/NIu6Qwu/8KDH+DhfWC8nUsmU09PxI= X-Spam-Score: 2.8 (++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Lars Ingebrigtsen writes: > Kazuhiro Ito writes: > >> I don't know whether auth-source supports multiple accounts on the >> same host and whether it is a feature that auth-source-search tend to >> return other user's passwor [...] Content analysis details: (2.8 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (michael.albinus[at]gmx.de) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [212.227.15.19 listed in wl.mailspike.net] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [185.89.38.155 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [212.227.15.19 listed in list.dnswl.org] -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Debbugs-Envelope-To: 49289 Cc: Kazuhiro Ito , 49289@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.8 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Lars Ingebrigtsen writes: > Kazuhiro Ito writes: > >> I don't know whether auth-source supports multiple accounts on the >> same host and whether it is a feature that auth-source-search tend to >> return other user's passwor [...] Content analysis details: (1.8 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [185.89.38.155 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [212.227.15.19 listed in list.dnswl.org] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [212.227.15.19 listed in wl.mailspike.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (michael.albinus[at]gmx.de) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 T_SCC_BODY_TEXT_LINE No description available. -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager Lars Ingebrigtsen writes: > Kazuhiro Ito writes: > >> I don't know whether auth-source supports multiple accounts on the >> same host and whether it is a feature that auth-source-search tend to >> return other user's password. But I think doubly obfuscated :secret >> value is obviously a bug. > > I think both things are bugs, and the second happens because of the > first bug. I've now pushed a fix for this to Emacs 28. FTR, I've pushed a similar fix to the secrets and plstore backends. Will be visible with Emacs 30. Best regards, Michael. From unknown Sun Aug 17 22:02:43 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 17 Jul 2024 11:24:12 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator