[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-09-22 Thread Thierry Carrez
** Changed in: glance Status: Fix Committed = Fix Released ** Changed in: glance Milestone: diablo-4 = 2011.3 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to glance in Ubuntu. https://bugs.launchpad.net/bugs/829064 Title:

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-09-22 Thread Thierry Carrez
** Changed in: glance Status: Fix Committed = Fix Released ** Changed in: glance Milestone: diablo-4 = 2011.3 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/829064 Title:

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-09-07 Thread Adam Gandelman
This has been fixed upstream, released in d4 and uploaded in glance-2011.3~d4-0ubuntu1 ** Changed in: glance (Ubuntu) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to glance in Ubuntu.

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-09-07 Thread Adam Gandelman
This has been fixed upstream, released in d4 and uploaded in glance-2011.3~d4-0ubuntu1 ** Changed in: glance (Ubuntu) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-08-31 Thread Martin Pitt
** Changed in: glance (Ubuntu) Milestone: ubuntu-11.10-beta-1 = ubuntu-11.10-beta-2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/829064 Title: glance/common/utils.py creates dangerous execute

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-08-24 Thread Jay Pipes
** Changed in: glance Status: Triaged = In Progress ** Changed in: glance Milestone: None = diablo-4 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/829064 Title: glance/common/utils.py

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-08-24 Thread Jay Pipes
** Changed in: glance Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/829064 Title: glance/common/utils.py creates dangerous execute function that uses

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-08-24 Thread Justin Shepherd
https://review.openstack.org/#change,332 ** Changed in: glance Assignee: (unassigned) = Justin Shepherd (jshepher) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/829064 Title:

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-08-21 Thread Jay Pipes
glance.common.utils.execute is not used anywhere in the Glance code base: jpipes@serialcoder:~/repos/glance/glance$ ack-grep --ignore-dir=tests execute registry/db/migrate_repo/versions/003_add_disk_format.py 99:image_records = conn.execute(sel).fetchall() 102:

[Bug 829064] Re: glance/common/utils.py creates dangerous execute function that uses the shell to run commands without filtering meta characters

2011-08-19 Thread Dave Walker
** Changed in: glance (Ubuntu) Importance: Undecided = Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/829064 Title: glance/common/utils.py creates dangerous execute function that uses