aboutsummaryrefslogtreecommitdiff
path: root/security/py-gnupg/pkg-descr
diff options
context:
space:
mode:
Diffstat (limited to 'security/py-gnupg/pkg-descr')
-rw-r--r--security/py-gnupg/pkg-descr14
1 files changed, 10 insertions, 4 deletions
diff --git a/security/py-gnupg/pkg-descr b/security/py-gnupg/pkg-descr
index 25fd9211147a..1d767b77b5d3 100644
--- a/security/py-gnupg/pkg-descr
+++ b/security/py-gnupg/pkg-descr
@@ -1,5 +1,11 @@
-GnuPGInterface is a Python module to interface with GnuPG . It concentrates
-on interacting with GnuPG via filehandles, providing access to control GnuPG
-via versatile and extensible means.
+This module allows easy access to GnuPG's key management, encryption and
+signature functionality from Python programs, by interacting with GnuPG through
+file descriptors. Input arguments are strictly checked and sanitised, and
+therefore this module should be safe to use in networked applications requiring
+direct user input. It is intended for use with Python 2.6 or greater.
-WWW: http://py-gnupg.sourceforge.net/
+This is a fork of python-gnupg-0.3.2, patched to fix a potential vulnerability
+which could result in remote code execution, do to unsanitised inputs being
+passed to subprocess.Popen([...], shell=True).
+
+WWW: https://github.com/isislovecruft/python-gnupg