Comment 1 for bug 1458189

Revision history for this message
Bernd Dietzel (l-ubuntuone1104) wrote :

By the way ... the file:
/usr/lib/linuxmint/mintInstall/remove.py

should be updatet , too.
it uses a funny mix of unsave and Deprecated python modules and a "Shell=True" for subprocess, wich is not necessary.

line 40 : ** unsave, allows shell injection **
os.system(command)

line 41: **Deprecated , allows shell injection **
commands.getoutput()

line 57: ** shell should be False , not True **
comnd = Popen(' '.join(cmd), shell=True)

Please update that.
Thanks :-)