generator.py in mint-backgrounds-maya allows Shell Commands

Bug #1458172 reported by Bernd Dietzel
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Linux Mint
New
Undecided
Unassigned

Bug Description

Package : mint-backgrounds-maya
Version : 1.5
File : generator.py

The file "generator.py" should be removed from the package.

It uses the old os.system and commands.getoutput() wich are vulnerable for Shell Command Injections.

If the file is still in use, take subprocess.Popen() instead.

Thank you :-)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.