Comment 12 for bug 366607

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package usb-imagewriter - 0.1.3-0ubuntu3

---------------
usb-imagewriter (0.1.3-0ubuntu3) karmic; urgency=critical

  * lib/imagewriter.py: New patch to handle spaces in image path (LP: #366607)
     - This patch fixes a possible command-injection security error, which is
       the reason for the urgency=critical.
     - Removed encapsulation in quotes from line 101, as described in the lower
       change, because that would fail if the path contained quotes.
     - Used a proper argument list instead of string in both Popen statements.
     - Changed shell=True to shell=False because it is no longer needed.

 -- Christopher Pavlina <email address hidden> Sat, 17 Oct 2009 22:55:27 -0400