matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
06e1a0bc14
sonic-buildimage/device/dell
History
Mai Bui 06e1a0bc14
[device/dell] Mitigation for security vulnerability (#11875) 
Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first.

#### Why I did it
`commands` module is not protected against malicious input
`getstatusoutput` is detected without a static string, uses `shell=True`
#### How I did it
Eliminate the use of `commands`
Use `subprocess.run()`, commands in `subprorcess.run()` are totally static
Fix indentation
#### How to verify it
Tested on DUT
[dell_log.txt](https://github.com/sonic-net/sonic-buildimage/files/9561332/dell_log.txt)
2023-01-05 16:22:09 -08:00
..
x86_64-dell_s6000_s1220-r0 [Profile separation] MMU infrastructure update for TD2 (#12626) 2022-11-17 12:58:11 -08:00
x86_64-dell_s6100_c2538-r0 [Buffer] Separate buffer profile for Force10-S6100 2022-07-12 11:48:01 -07:00
x86_64-dell_z9100_c2538-r0 Add platform_asic file to each platform folder in sonic-device-data based package (#8542) 2021-10-08 19:27:48 -07:00
x86_64-dellemc_n3248pxe_c3338-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_n3248te_c3338-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_s5212f_c3538-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_s5224f_c3538-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_s5232f_c3538-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_s5248f_c3538-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_s5296f_c3538-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_z9264f_c3538-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_z9332f_d1508-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
x86_64-dellemc_z9432f_c3758-r0 [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00