Index: packages/arch/i386/grub-installer/debian/changelog
===================================================================
--- packages/arch/i386/grub-installer/debian/changelog	(révision 49780)
+++ packages/arch/i386/grub-installer/debian/changelog	(copie de travail)
@@ -1,3 +1,11 @@
+grub-installer (1.27) UNRELEASED; urgency=low
+
+  [ Romain Perier ]
+  * Password was send in clear-text into menu.lst
+    use grub --batch with md5crypt alternative to correct it (Closes:#442443).
+
+ -- romain perier <romain.perier@gmail.com>  Sat, 13 Oct 2007 18:52:19 +0200
+
 grub-installer (1.26) unstable; urgency=low
 
   [ Joey Hess ]
Index: packages/arch/i386/grub-installer/grub-installer
===================================================================
--- packages/arch/i386/grub-installer/grub-installer	(révision 49780)
+++ packages/arch/i386/grub-installer/grub-installer	(copie de travail)
@@ -618,10 +618,10 @@
 	password="$RET"
 	# check if the password is crypted
 	db_get grub-installer/password-crypted
-	if [ "$RET" = true ]; then
-		password_opts=--md5
+	if [ "$RET" = false ]; then
+		password=`echo -e "md5crypt\n${password}" | grub --batch 2>&1 /dev/null | grep -E "Encrypted:" | cut -d ' ' -f 2`
 	fi
-	echo "password ${password_opts:+$password_opts }$password" \
+	echo "password --md5 ${password}" \
 		> /tmp/menu.lst.password
 	# Add a line to menu.lst to use the given password
 	# The line is appended after the commented example