sonic-buildimage/platform
Mai Bui 648ca075c7
[device/mellanox] Mitigation for security vulnerability (#11877)
Signed-off-by: maipbui <maibui@microsoft.com>
Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first.
#### Why I did it
`subprocess.Popen()` and `subprocess.check_output()` is used with `shell=True`, which is very dangerous for shell injection.
#### How I did it
Disable `shell=True`, enable `shell=False`
#### How to verify it
Tested on DUT, compare and verify the output between the original behavior and the new changes' behavior.
[testresults.zip](https://github.com/sonic-net/sonic-buildimage/files/9550867/testresults.zip)
2022-10-06 17:51:31 -04:00
..
barefoot [Arista] Update platform submodules (#12225) 2022-09-30 16:03:40 +08:00
broadcom [Arista] Update platform submodules (#12225) 2022-09-30 16:03:40 +08:00
cavium Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
centec Replace swsssdk with swsscommon in centec devices. (#11350) 2022-08-24 12:39:51 +08:00
centec-arm64 [centec] fix some bugs on centec tsingma bsp and v682 sonic_platform package (#10685) 2022-07-05 18:05:03 -07:00
checkout Platform/cisco-8000 module for sonic-buildimage (#8172) 2021-08-06 09:11:54 +08:00
components Mount directory warmboot in docker gbsyncd (#11852) 2022-08-26 22:00:45 +08:00
generic [dockers] Rename 'docker-snmp-sv2' to 'docker-snmp' (#4699) 2020-06-11 16:04:23 -07:00
innovium Revert "Support for serdes platform library debian installation for Innovium SONiC image (#11920)" (#12227) 2022-09-29 17:12:20 -07:00
marvell [bcm sai] upgrade Broadcom SAI to 7.1.0.0-5 (#11236) 2022-06-23 15:34:51 -07:00
marvell-arm64 Support symcrypt fips config for aboot/uboot (#10729) 2022-06-02 15:35:17 +08:00
marvell-armhf [armhf][sonic-installer] Fix the sonic-installer install images on armhf platform issue (#12284) 2022-10-06 08:29:21 -07:00
mellanox [device/mellanox] Mitigation for security vulnerability (#11877) 2022-10-06 17:51:31 -04:00
nephos Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
p4 Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
pddf Adding support for get/set low power mode for QSFPs in PDDF common APIs (#11786) 2022-09-09 14:33:12 -07:00
template Mount directory warmboot in docker gbsyncd (#11852) 2022-08-26 22:00:45 +08:00
vs Update azure.github.io links to sonic-net.github.io (#12209) 2022-10-02 14:02:10 +08:00