Martin Wache <wa...@abstracture.de> writes: > Hi David, > >> I believe this bug is fixed in the 2.x series of nullmailer, which >> changed the way that arguments are passed to the helper. If you would >> like to test, 2.1 is available from stretch backports. There could be >> configuration incompatibilities between 1.x and 2.x, so I would >> recommend testing on a non-mission-critical machine. >> > > Thank you for your fast answer. > > I've installed nullmailer_2.1-7~bpo9+1_amd64.deb from backports, run > dpkg-reconfigure and checked again. > You are right, this seems to be fixed. > > Are there any plans to backport the fix into debian stable?
At the moment I don't see a good way to backport the fix. It would require some quite intrusive changes to upstream code, and break any existing custom helpers. > To me it was very surprising to see the e-mail password in the output of > ps. I checked the documentation, but I didn't find any hints or warnings > about this. Did I miss anything? I'm not aware of anything like that, but I wasn't involved with maintaining the 1.x series, so I might have missed something. d