...and Remove this  os.system calls, too please :-)

/usr/share/mate-menu/plugins/recent.py:189:        
x = os.system("gvfs-open \""+filename+"\"")

/usr/share/mate-menu/plugins/applications.py:991:            
os.system("rm \"%s\" &" % desktopEntry.desktopFile)

/usr/share/mate-menu/plugins/applications.py:1095:
os.system(fullstring + " &")

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1586346

Title:
  Shell injection with a GTK-Bookmark

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mate-menu/+bug/1586346/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to