From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Kangas Newsgroups: gmane.emacs.bugs Subject: bug#8427: [SECURITY] sql.el -- comint process passwords are leaked to ps(1) listing Date: Fri, 5 Nov 2021 00:11:26 -0700 Message-ID: References: <83y2utli1y.fsf@gnu.org> <87k0wnpabe.fsf@gnus.org> <83pms8n5m2.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="28170"; mail-complaints-to="usenet@ciao.gmane.io" Cc: larsi@gnus.org, ahyatt@gmail.com, 8427@debbugs.gnu.org, michael.albinus@gmx.de To: Michael Mauger Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri Nov 05 08:12:13 2021 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mitOW-000741-S6 for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 05 Nov 2021 08:12:12 +0100 Original-Received: from localhost ([::1]:45092 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mitOV-0007t5-Cy for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 05 Nov 2021 03:12:11 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:48128) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mitON-0007pp-AO for bug-gnu-emacs@gnu.org; Fri, 05 Nov 2021 03:12:03 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:32965) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mitON-0003Vu-1r for bug-gnu-emacs@gnu.org; Fri, 05 Nov 2021 03:12:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mitOM-0006bv-Ss for bug-gnu-emacs@gnu.org; Fri, 05 Nov 2021 03:12:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Kangas Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 05 Nov 2021 07:12:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 8427 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 8427-submit@debbugs.gnu.org id=B8427.163609629425356 (code B ref 8427); Fri, 05 Nov 2021 07:12:02 +0000 Original-Received: (at 8427) by debbugs.gnu.org; 5 Nov 2021 07:11:34 +0000 Original-Received: from localhost ([127.0.0.1]:44509 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mitNt-0006ap-Sw for submit@debbugs.gnu.org; Fri, 05 Nov 2021 03:11:34 -0400 Original-Received: from mail-pl1-f174.google.com ([209.85.214.174]:44999) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mitNr-0006aU-Ty for 8427@debbugs.gnu.org; Fri, 05 Nov 2021 03:11:32 -0400 Original-Received: by mail-pl1-f174.google.com with SMTP id t11so10505349plq.11 for <8427@debbugs.gnu.org>; Fri, 05 Nov 2021 00:11:31 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=McDr/c4HXihBB++A930P5NOgJFSuimW3d9v8NG7TN4o=; b=iE/FllwDsTw28Z0RnlrHFrRhReHyGNmlbZibJVMxKZLj7gmfkln9jkDOEJ+xCbQvnn ZLd5fuRfSaa5cbnTy5pqO1+lBTkO8oeNiqaUoYDTPZIPJItVIjEknw0oe+Vt6CmqzrhD t/4/Ceoi5ijZzaqZIXgubafT5zcDmTbuUqfepXs/9i90U17icrWn5qTce0n8F5MCIBmJ oiSGnQ9aN3A10lZujdwb62FfKOj1bI+A1ONt9vw9K9hbrSit8jC/R17cgYn/fNWPybQr EB55vIDPtkgj/F0i/myBC0HZ90gAX9kJ8ZZXKV3KdCb5xFFxweuCgWY0iVOdg58lSzin iX/A== X-Gm-Message-State: AOAM5325ES/bNNWXg9+0mkonJAuSlhE4Dw8LEQYU2451wP5NDgfw35Xg gZFOsBOBKeZEWeuVzlRt5y7WxLIZFhPN6JGvi7k= X-Google-Smtp-Source: ABdhPJwuxNId0sl0BY9nb8zIQjTRpEdxTLc3jF4Bz65O5xFl7sRic1nMcembgQm2BnQYXEbSb5yMOdkdGrzmRHssEMI= X-Received: by 2002:a17:90b:1e0e:: with SMTP id pg14mr27773685pjb.143.1636096286384; Fri, 05 Nov 2021 00:11:26 -0700 (PDT) Original-Received: from 753933720722 named unknown by gmailapi.google.com with HTTPREST; Fri, 5 Nov 2021 00:11:26 -0700 In-Reply-To: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:218972 Archived-At: close 8427 29.1 thanks Michael Mauger writes: > I've pushed to master for now. I'll test this week and decide then > whether I push to emacs-28. Since the fix has been installed on master, I'm closing this bug. We can still discuss here for up to 30 days before the bug is archived, in case there is anything relating to cherry-picking the patch to the emacs-28 branch. Thank you Andrew for writing the patch and Michael for reviewing and installing it!