This bug was fixed in the package usb-imagewriter - 0.1.3-0ubuntu3
---
usb-imagewriter (0.1.3-0ubuntu3) karmic; urgency=critical
* lib/imagewriter.py: New patch to handle spaces in image path (LP: #366607)
- This patch fixes a possible command-injection security error, which is
Re-requesting sponsorship to get this pushed in time for karmic, because
of the command injection problem.
--
Doesn't work, if path to .img file contains spaces.
https://bugs.launchpad.net/bugs/366607
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
Requesting sponsorship to get this pushed in time for karmic, because of
the command injection problem.
--
Doesn't work, if path to .img file contains spaces.
https://bugs.launchpad.net/bugs/366607
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
New patch (0ubuntu3). Urgency set to critical because this bug (and it's
first fix) enable a possible command-injection security problem into a
root process, which this patch fixes.
** Attachment added: "usb-imagewriter_0.1.3-0ubuntu3.debdiff"
http://launchpadlibrarian.net/33859110/usb-imagewri
Re-opened because the fix given is half-assed and still fails if the
filename contains a double quote. Here is a patch that uses a proper
list for the Popen arguments, with shell=False. More secure as well...
** Changed in: usb-imagewriter (Ubuntu)
Status: Fix Released => In Progress
** At
Just realized there have been more changes in karmic. I'll post another,
more up-to-date patch in a minute or two...
--
Doesn't work, if path to .img file contains spaces.
https://bugs.launchpad.net/bugs/366607
You received this bug notification because you are a member of Ubuntu
Bugs, which is s
This bug was fixed in the package usb-imagewriter - 0.1.3-0ubuntu2
---
usb-imagewriter (0.1.3-0ubuntu2) karmic; urgency=low
[ Siegfried-Angel Gevattder Pujals ]
* debian/control:
- Move website to Homepage field.
- Add a Dependency on python-glade2 (LP: #370297).
-
I have attached a .debdiff for the package changes. I am requesting
sponsorship from ubuntu-universe-sponsors. This is my first time
submitting a package change and asking for sponsorship. I would welcome
input as to whether or not I have followed the correct procedure for
this. Thanks!
** Att
I have the same problem. I fixed this in the python code by
encapsulating the source file in double quotes. This way it passes both
the file check as will as the "dd" command. I no longer have any
trouble writing images that have a space in the path.
Please let me know if I generated this patch
I can also confirm this bug.
It works after I make sure none of the path has spaces.
--
Doesn't work, if path to .img file contains spaces.
https://bugs.launchpad.net/bugs/366607
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubunt
I can confirm this bug..
I was trying to write the image from:
"/home/ruben/Área de Trabalho/ubuntu-9.04-netbook-remix-i386.img"
And the application did nothing.
Then I tried from:
"/home/ruben/ubuntu-9.04-netbook-remix-i386.img"
And it worked as expected.
--
Doesn't work, if path to .im
** Attachment added: "Dependencies.txt"
http://launchpadlibrarian.net/25956591/Dependencies.txt
--
Doesn't work, if path to .img file contains spaces.
https://bugs.launchpad.net/bugs/366607
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubun
12 matches
Mail list logo
