input to gpg should be sent from proc_open or piped from a temporary file instead of echo on the command line

Bug #503544 reported by Paul Yasi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
citrusdb
Fix Released
Undecided
Unassigned

Bug Description

The input to gpg should be sent using proc_open or written to a temporary file and then piped into gpg instead of echo on the command line where a process list might see it.

description: updated
summary: - input to gpg should be piped from a temporary file instead of echo on
- the command line
+ input to gpg should be sent from proc_open or piped from a temporary
+ file instead of echo on the command line
Changed in citrusdb:
status: New → Fix Committed
Changed in citrusdb:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.