mint-search-apt : Shell Code injection
Bug #1527891 reported by
Bernd Dietzel
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Linux Mint |
Fix Committed
|
Undecided
|
Unassigned | ||
Bug Description
https:/
Demo :
in a terminal type in
mint-search-apt "gimp;xeyes"
this will start xeyes but should not.
LinuxMint uses insecure api calls in may python scripts, this is ony one of many.
https:/
Revision history for this message
| Bernd Dietzel (l-ubuntuone1104) wrote | #1 |
Revision history for this message
| Gwendal LE BIHAN (gwendal-lebihan-dev) wrote | #2 |
| Changed in linuxmint: | |
| status: | New → Fix Committed |
To post a comment you must log in.
https:/