git: openjdk/jdk25u-dev: master: 8354469: Keytool exposes the password in plain text when command is piped using | grep

Goetz Lindenmaier goetz at openjdk.org
Mon Feb 2 08:12:12 UTC 2026


Changeset: d221f6f5
Branch: master
Author:    Goetz Lindenmaier <goetz at openjdk.org>
Date:      2026-02-02 08:10:05 +0000
URL:       https://git.openjdk.org/jdk25u-dev/commit/d221f6f560380698746e69cabb1a0ba9feadc23f

8354469: Keytool exposes the password in plain text when command is piped using | grep

Backport-of: a7a3a660e33fabc025ebe887f5605741be9ca8c3

! src/java.base/share/classes/jdk/internal/io/JdkConsoleImpl.java
! src/java.base/share/classes/sun/security/util/Password.java
! src/java.base/share/classes/sun/security/util/resources/security.properties
+ test/jdk/sun/security/tools/keytool/EchoPassword.java
+ test/jdk/sun/security/tools/keytool/SetInPassword.java
! test/jdk/sun/security/util/Resources/Usages.java



More information about the jdk-updates-changes mailing list