------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
     
http://bugs.kde.org/show_bug.cgi?id=69089     
           Summary: kmail debug output reveals IMAP password
           Product: kmail
           Version: unspecified
          Platform: Compiled Sources
        OS/Version: Solaris
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: kmail@kde.org
        ReportedBy: tk@Genetik.Uni-Bielefeld.DE


Version:            (using KDE Devel)
Installed from:    Compiled sources
Compiler:          gcc version 2.95.3 20010315 (release) 
OS:          Solaris

KMail's debug output writes my IMAP password to ~/.xsession-errors; I've found lots of lines like the following:

kmail: KMFolderImap::checkValidity of: imaps://tk:MyPasword@imap.my.domain:993/....

(I had to obscure this line for obvious reasons)

I consider this quite critical; not even debug output should write any passwords in clear to a file...