git: openjdk/jdk25u-dev: master: 8354469: Keytool exposes the password in plain text when command is piped using | grep
Goetz Lindenmaier
goetz at openjdk.org
Mon Feb 2 08:12:12 UTC 2026
Changeset: d221f6f5
Branch: master
Author: Goetz Lindenmaier <goetz at openjdk.org>
Date: 2026-02-02 08:10:05 +0000
URL: https://git.openjdk.org/jdk25u-dev/commit/d221f6f560380698746e69cabb1a0ba9feadc23f
8354469: Keytool exposes the password in plain text when command is piped using | grep
Backport-of: a7a3a660e33fabc025ebe887f5605741be9ca8c3
! src/java.base/share/classes/jdk/internal/io/JdkConsoleImpl.java
! src/java.base/share/classes/sun/security/util/Password.java
! src/java.base/share/classes/sun/security/util/resources/security.properties
+ test/jdk/sun/security/tools/keytool/EchoPassword.java
+ test/jdk/sun/security/tools/keytool/SetInPassword.java
! test/jdk/sun/security/util/Resources/Usages.java
More information about the jdk-updates-changes
mailing list