aboutsummaryrefslogtreecommitdiff
path: root/security/py-gnupg/pkg-descr
diff options
context:
space:
mode:
authorCarlo Strub <cs@FreeBSD.org>2013-10-05 22:04:31 +0000
committerCarlo Strub <cs@FreeBSD.org>2013-10-05 22:04:31 +0000
commit677d505d1157887cc3e13346514b1260a674b926 (patch)
tree551eb94198b5cab7cc2513dffe774daf34e84ec6 /security/py-gnupg/pkg-descr
parent666a0c68954b27f17972dbc2cbad5fd4f5315523 (diff)
downloadports-677d505d1157887cc3e13346514b1260a674b926.tar.gz
ports-677d505d1157887cc3e13346514b1260a674b926.zip
Notes
Diffstat (limited to 'security/py-gnupg/pkg-descr')
-rw-r--r--security/py-gnupg/pkg-descr14
1 files changed, 10 insertions, 4 deletions
diff --git a/security/py-gnupg/pkg-descr b/security/py-gnupg/pkg-descr
index 25fd9211147a..1d767b77b5d3 100644
--- a/security/py-gnupg/pkg-descr
+++ b/security/py-gnupg/pkg-descr
@@ -1,5 +1,11 @@
-GnuPGInterface is a Python module to interface with GnuPG . It concentrates
-on interacting with GnuPG via filehandles, providing access to control GnuPG
-via versatile and extensible means.
+This module allows easy access to GnuPG's key management, encryption and
+signature functionality from Python programs, by interacting with GnuPG through
+file descriptors. Input arguments are strictly checked and sanitised, and
+therefore this module should be safe to use in networked applications requiring
+direct user input. It is intended for use with Python 2.6 or greater.
-WWW: http://py-gnupg.sourceforge.net/
+This is a fork of python-gnupg-0.3.2, patched to fix a potential vulnerability
+which could result in remote code execution, do to unsanitised inputs being
+passed to subprocess.Popen([...], shell=True).
+
+WWW: https://github.com/isislovecruft/python-gnupg