[jmdocherty]

Glass half-full: "Oops! They missed this because they were busy making all the other stuff super-secure."

Glass half-empty: "Oh-my-goodness...what would Steve say? FFS. We can't trust anyone any more!"

I'm inclined to be half-full.

[tinus_hn]

Glass completely empty: why is the system storing your password when the volume is not mounted so it can be revealed by the dialog?

[psychometry]

Someone probably just mixed up the hash keys for the password field and the hint field. The hint needs to be stored unencrypted so that it can be displayed.

[_jn]

Agree. It's probably an issue with the form, nothing underlying. (which means encrypted containers created via the command line should be safe from this vulnerability?)