Package: plasma-workspace
Version: 4:6.3.4-1
Severity: important

Please feel free to tag this security.

I recently accidentally typed a password into krunner. After that, I was
able to recall the password in full-length clear-text by just typing the
first character of the password into krunner. In Krunner Settings, there
is a "Clear History" button. After pressing this, I was still able to
recall the password in the same way. It was necessary to kill and
restart krunner to make that password go away.

Greetings
Marc


-- System Information:
Debian Release: 13.0
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.27-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages plasma-workspace depends on:
ii dbus-user-session [default-dbus-session-bus] 1.16.2-2
ii drkonqi 6.3.4-1
ii frameworkintegration6 6.13.0-1
ii gdb 16.3-1
ii init-system-helpers 1.68
ii iso-codes 4.18.0-1
ii kactivitymanagerd 6.3.4-1
ii kded6 6.13.0-1
ii kglobalacceld 6.3.4-1
ii kio6 6.13.0-3
ii kwallet6 6.13.0-1
ii kwin-common 4:6.3.4-3
ii kwin-wayland 4:6.3.4-3
ii libappstreamqt3 1.0.5-1
ii libbatterycontrol6 4:6.3.4-1
ii libc6 2.41-7
ii libcanberra0 0.30-18
ii libcolorcorrect6 4:6.3.4-1
ii libcrypt1 1:4.4.38-1
ii libdbus-1-3 1.16.2-2
ii libfontconfig1 2.15.0-2.3
ii libfreetype6 2.13.3+dfsg-1
ii libgcc-s1 14.2.0-19
ii libice6 2:1.1.1-1
ii libicu76 76.1-3
ii libkexiv2qt6-0 25.04.0-1
ii libkf6archive6 6.13.0-1
ii libkf6authcore6 6.13.0-1
ii libkf6baloo6 6.13.0-1
ii libkf6bookmarks6 6.13.0-1
ii libkf6calendarevents6 6.13.0-1
ii libkf6colorscheme6 6.13.0-1
ii libkf6completion6 6.13.0-1
ii libkf6config-bin 6.13.0-2
ii libkf6configcore6 6.13.0-2
ii libkf6configgui6 6.13.0-2
ii libkf6configqml6 6.13.0-2
ii libkf6configwidgets6 6.13.0-1
ii libkf6coreaddons6 6.13.0-1
ii libkf6crash6 6.13.0-1
ii libkf6dbusaddons6 6.13.0-1
ii libkf6globalaccel6 6.13.0-1
ii libkf6guiaddons6 6.13.0-1
ii libkf6holidays6 6.13.0-1
ii libkf6i18n6 6.13.0-1
ii libkf6i18nlocaledata6 6.13.0-1
ii libkf6iconthemes6 6.13.0-1
ii libkf6jobwidgets6 6.13.0-1
ii libkf6kcmutils6 6.13.0-1
ii libkf6kcmutilscore6 6.13.0-1
ii libkf6kcmutilsquick6 6.13.0-1
ii libkf6kiocore6 6.13.0-3
ii libkf6kiofilewidgets6 6.13.0-3
ii libkf6kiogui6 6.13.0-3
ii libkf6kiowidgets6 6.13.0-3
ii libkf6networkmanagerqt6 6.13.0-1
ii libkf6newstuffcore6 6.13.0-1
ii libkf6newstuffwidgets6 6.13.0-1
ii libkf6notifications6 6.13.0-1
ii libkf6notifyconfig6 6.13.0-1
ii libkf6package6 6.13.0-1
ii libkf6parts6 6.13.0-1
ii libkf6prison6 6.13.0-1
ii libkf6runner6 6.13.0-1
ii libkf6service-bin 6.13.0-1
ii libkf6service6 6.13.0-1
ii libkf6solid6 6.13.0-1
ii libkf6statusnotifieritem6 6.13.0-1
ii libkf6svg6 6.13.0-1
ii libkf6texteditor-bin 6.13.0-1
ii libkf6texteditor6 6.13.0-1
ii libkf6textwidgets6 6.13.0-1
ii libkf6unitconversion6 6.13.0-1
ii libkf6userfeedbackcore6 6.13.0-1
ii libkf6wallet6 6.13.0-1
ii libkf6widgetsaddons6 6.13.0-1
ii libkf6windowsystem6 6.13.0-1
ii libkf6xmlgui6 6.13.0-1
ii libkfontinst6 4:6.3.4-1
ii libkfontinstui6 4:6.3.4-1
ii libklipper6 4:6.3.4-1
ii libkmpris6 4:6.3.4-1
ii libkscreenlocker6 6.3.4-1
ii libksysguardsensorfaces2 4:6.3.4-1
ii libkwaylandclient6 4:6.3.4-1
ii libkworkspace6-6 4:6.3.4-1
ii liblayershellqtinterface6 6.3.4-1
ii libnotificationmanager1 4:6.3.4-1
ii libpackagekitqt6-1 1.1.2-1+b1
ii libphonon4qt6-4t64 4:4.12.0-4
ii libplasma5support6 4:6.3.4-1
ii libplasma6 6.3.4-1
ii libplasmaactivities6 6.3.4-1
ii libplasmaactivitiesstats1 6.3.4-1
ii libplasmaquick6 6.3.4-1
ii libpolkit-qt6-1-1 0.200.0-4+b1
ii libprocesscore10 4:6.3.4-1
ii libqalculate23 5.5.2-1+b1
ii libqt6core6t64 [qt6-base-private-abi] 6.8.2+dfsg-6
ii libqt6dbus6 6.8.2+dfsg-6
ii libqt6gui6 6.8.2+dfsg-6
ii libqt6network6 6.8.2+dfsg-6
ii libqt6positioning6 6.8.2-3
ii libqt6printsupport6 6.8.2+dfsg-6
ii libqt6qml6 [qt6-declarative-private-abi] 6.8.2+dfsg-7
ii libqt6quick6 6.8.2+dfsg-7
ii libqt6sql6 6.8.2+dfsg-6
ii libqt6svg6 6.8.2-3
ii libqt6waylandclient6 [qt6-waylandclient-privat 6.8.2-4
e-abi]
ii libqt6widgets6 6.8.2+dfsg-6
ii libqt6xml6 6.8.2+dfsg-6
ii libsm6 2:1.2.6-1
ii libstdc++6 14.2.0-19
ii libsystemd0 257.5-2
ii libtaskmanager6 4:6.3.4-1
ii libudev1 257.5-2
ii libwayland-client0 1.23.1-3
ii libweather-ion7 4:6.3.4-1
ii libx11-6 2:1.8.12-1
ii libxcb-composite0 1.17.0-2+b1
ii libxcb-cursor0 0.1.5-1
ii libxcb-damage0 1.17.0-2+b1
ii libxcb-image0 0.4.0-2+b2
ii libxcb-shape0 1.17.0-2+b1
ii libxcb-util1 0.4.1-1
ii libxcb1 1.17.0-2+b1
ii libxcursor1 1:1.2.3-1
ii libxfixes3 1:6.0.0-2+b4
ii libxft2 2.3.6-1+b4
ii libxtst6 2:1.2.5-1
ii milou 4:6.3.4-1
ii plasma-desktoptheme 6.3.4-1
ii plasma-integration 6.3.4-1
ii plasma-workspace-data 4:6.3.4-1
ii python3 3.13.3-1
ii qdbus-qt6 6.8.2-5
ii qml6-module-org-kde-activities 6.3.4-1
ii qml6-module-org-kde-breeze 6.3.4-1
ii qml6-module-org-kde-config 6.13.0-2
ii qml6-module-org-kde-coreaddons 6.13.0-1
ii qml6-module-org-kde-draganddrop 6.13.0-1
ii qml6-module-org-kde-kcmutils 6.13.0-1
ii qml6-module-org-kde-kholidays 6.13.0-1
ii qml6-module-org-kde-kirigami 6.13.0-1
ii qml6-module-org-kde-kirigamiaddons-components 1.7.0-1
ii qml6-module-org-kde-kitemmodels 6.13.0-1
ii qml6-module-org-kde-kquickcontrols 6.13.0-1
ii qml6-module-org-kde-kquickcontrolsaddons 6.13.0-1
ii qml6-module-org-kde-ksvg 6.13.0-1
ii qml6-module-org-kde-ksysguard 4:6.3.4-1
ii qml6-module-org-kde-kwindowsystem 6.13.0-1
ii qml6-module-org-kde-newstuff 6.13.0-1
ii qml6-module-org-kde-notifications 6.13.0-1
ii qml6-module-org-kde-pipewire 6.3.4-1
ii qml6-module-org-kde-plasma-plasma5support 4:6.3.4-1
ii qml6-module-org-kde-prison 6.13.0-1
ii qml6-module-org-kde-quickcharts 6.13.0-1
ii qml6-module-org-kde-userfeedback 6.13.0-1
ii qml6-module-qt5compat-graphicaleffects 6.8.2-3+b1
ii qml6-module-qtcore 6.8.2+dfsg-7
ii qml6-module-qtpositioning 6.8.2-3
ii qml6-module-qtqml 6.8.2+dfsg-7
ii qml6-module-qtqml-models 6.8.2+dfsg-7
ii qml6-module-qtqml-workerscript 6.8.2+dfsg-7
ii qml6-module-qtquick 6.8.2+dfsg-7
ii qml6-module-qtquick-controls 6.8.2+dfsg-7
ii qml6-module-qtquick-dialogs 6.8.2+dfsg-7
ii qml6-module-qtquick-layouts 6.8.2+dfsg-7
ii qml6-module-qtquick-shapes 6.8.2+dfsg-7
ii qml6-module-qtquick-templates 6.8.2+dfsg-7
ii qml6-module-qtquick-virtualkeyboard 6.8.2+dfsg-3
ii qml6-module-qtquick-window 6.8.2+dfsg-7
ii qt6-wayland 6.8.2-4
ii udisks2 2.10.1-12
ii x11-utils 7.7+7
ii x11-xserver-utils 7.7+11
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1

Versions of packages plasma-workspace recommends:
ii kde-cli-tools 4:6.3.4-1
ii kio-extras 4:25.04.0-1
ii kio-fuse 5.1.0-1+b1
ii ksystemstats 6.3.4-1
pn plasma-workspace-doc <none>
ii powerdevil 4:6.3.4-1
ii systemsettings 4:6.3.4-1

plasma-workspace suggests no packages.

-- no debconf information

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)