Bug#1060117: pass-otp: oathtool safety: avoid argument splitting, send secrets via stdin instead of arguments

2024-01-17 Thread Philip Rinn
Hi Paul, thanks, I'll have a look next week and prepare an upload. Best, Philip OpenPGP_signature.asc Description: OpenPGP digital signature

Bug#1060117: pass-otp: oathtool safety: avoid argument splitting, send secrets via stdin instead of arguments

2024-01-05 Thread Paul Wise
Package: pass-otp Version: 1.2.0-9 Severity: normal Tags: security patch Forwarded: https://github.com/tadfisher/pass-otp/issues/167  https://github.com/tadfisher/pass-otp/pulls/182 X-Debbugs-Cc: Debian Security Team Since upstream seems to be undermaintained, could you add the attached patches