GitHub PushEvent at 2014-07-22 07:05:37
Repository: openstack
Actor: openstack-gerrit
Payload: {"shas":[["0f472dcc2a9fd68665f180260afd616f4a74da1c","d95b56ce41a2e1ac4cecdd398defd7414407cc08@review.openstack.org","Updated openstack/openstack\nProject: openstack/glance  f4a2e9908aff184653785d91dd957afd8cb0618c\n\nSecurity hardening: fix possible shell injection vulnerability\n\nThe glance/cmd/control.py file contains a possible shell injection\nvulnerability:\n\nhttps://github.com/openstack/glance/blob/master/glance/cmd/control.py#L134 .\n\nSetting 'shell=True' here opens the possibility of shell injection\nby setting server to something like '; rm -rf /'. This will cause\nthe command 'rm -rf /' to be run with the privileges of the user\nthat ran Glance.\n\nThe fix is to parameterize the input so that the command run here\ncan only be 'logger'.\n\nChange-Id: If48106ceea1dd582bcec9d03e056d88591bcba8d\nCloses-bug: 1335208","Jenkins",true]],"size":1,"ref":"refs/heads/milestone-proposed","head":"0f472dcc2a9fd68665f180260afd616f4a74da1c"}