- Package:
- file-roller
- Source:
- file-roller
- Description:
- archive manager for GNOME
- Submitter:
- Philipp Kern
- Date:
- 2015-10-03 13:09:05 UTC
- Severity:
- important
When producing an encrypted 7z archive the following leaks into ps output: /usr/lib/p7zip/7z a -bd -y -p<pass> -mx=7 -i@<file-list> -- <output-file> The password should instead be passed via stdin or through some other mechanism because this way it is leaked to other users on the same system.