mirror of https://github.com/Telecominfraproject/ols-nos.git synced 2025-10-30 01:32:35 +00:00

Files

Mai Bui 6f67a3ac6a [device/quanta] Mitigation for security vulnerability (#11867 )

Signed-off-by: maipbui <maibui@microsoft.com>
Dependency: [https://github.com/sonic-net/sonic-buildimage/pull/12065](https://github.com/sonic-net/sonic-buildimage/pull/12065)
#### Why I did it
`shell=True` is dangerous because this call will spawn the command using a shell process
`os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content.
#### How I did it
`os` - use with `subprocess`
Use `shell=False` with shell features
- redirection: [https://stackoverflow.com/questions/4965159/how-to-redirect-output-with-subprocess-in-python/6482200#6482200?newreg=53afb91b3ebd47c5930be627fcdf2930](https://stackoverflow.com/questions/4965159/how-to-redirect-output-with-subprocess-in-python/6482200#6482200?newreg=53afb91b3ebd47c5930be627fcdf2930)
- `|` operator: [https://docs.python.org/2/library/subprocess.html#replacing-shell-pipeline](https://docs.python.org/2/library/subprocess.html#replacing-shell-pipeline)

2022-10-19 10:05:36 -04:00

debian

[platform][Quanta] Add debian install files for sonic_platform-1.0-py3-none-any.whl (#7947 )

2021-06-23 14:52:41 -07:00

ix1b-32x

[device/quanta] Mitigation for security vulnerability (#11867 )

2022-10-19 10:05:36 -04:00

ix7-32x

[device/quanta] Mitigation for security vulnerability (#11867 )

2022-10-19 10:05:36 -04:00

ix7-bwde-32x

[device/quanta] Mitigation for security vulnerability (#11867 )