GNU bug report logs - #8427
[SECURITY] sql.el -- comint process passwords are leaked to ps(1) listing

Previous Next

Package: emacs;

Reported by: Jari Aalto <jari.aalto <at> cante.net>

Date: Tue, 5 Apr 2011 11:28:01 UTC

Severity: normal

Tags: security

Found in version 23.2+1-7

Fixed in version 29.1

Done: Stefan Kangas <stefan <at> marxist.se>

Bug is archived. No further changes may be made.

Full log

Message #89 received at 8427 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Michael Mauger <mmauger <at> protonmail.com>
Cc: "michael.albinus <at> gmx.de" <michael.albinus <at> gmx.de>,
 Eli Zaretskii <eliz <at> gnu.org>, "8427 <at> debbugs.gnu.org" <8427 <at> debbugs.gnu.org>,
 "stefan <at> marxist.se" <stefan <at> marxist.se>, Andrew Hyatt <ahyatt <at> gmail.com>
Subject: Re: bug#8427: [SECURITY] sql.el -- comint process passwords are
 leaked to ps(1) listing
Date: Mon, 21 Sep 2020 14:45:57 +0200

Michael Mauger <mmauger <at> protonmail.com> writes:

>> Please wait for a while, I'd like Michael Mauger to review this.
>>
>> Thanks.
>
> I will take a look after New Years. Thank you, Andrew and Eli.

Michael, have you had time to look at the patches?  I had a brief skim,
and they looked reasonable to me, but I have neither read them in-depth
nor tried them.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no
This bug report was last modified 3 years and 201 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.