#800772 Password leaked into process list with p7zip

Package:
file-roller
Source:
file-roller
Description:
archive manager for GNOME
Submitter:
Philipp Kern
Date:
2015-10-03 13:09:05 UTC
Severity:
important
#800772#5
Date:
2015-10-03 13:06:27 UTC
From:
To:
When producing an encrypted 7z archive the following leaks into ps
output:

/usr/lib/p7zip/7z a -bd -y -p<pass> -mx=7 -i@<file-list> --
<output-file>

The password should instead be passed via stdin or through some
other mechanism because this way it is leaked to other users on
the same system.