This bug was fixed in the package usb-imagewriter - 0.1.3-0ubuntu3

---------------
usb-imagewriter (0.1.3-0ubuntu3) karmic; urgency=critical

  * lib/imagewriter.py: New patch to handle spaces in image path (LP: #366607)
     - This patch fixes a possible command-injection security error, which is
       the reason for the urgency=critical.
     - Removed encapsulation in quotes from line 101, as described in the lower
       change, because that would fail if the path contained quotes.
     - Used a proper argument list instead of string in both Popen statements.
     - Changed shell=True to shell=False because it is no longer needed.

 -- Christopher Pavlina <pavlina.ch...@gmail.com>   Sat, 17 Oct 2009
22:55:27 -0400

** Changed in: usb-imagewriter (Ubuntu)
       Status: In Progress => Fix Released

-- 
Doesn't work, if path to .img file contains spaces.
https://bugs.launchpad.net/bugs/366607
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to