Skip to content

Commit 4c2808a

Browse files
committed
Fix: fix CVE-2020-28243
1 parent a48a5a9 commit 4c2808a

File tree

1 file changed

+0
-2
lines changed

1 file changed

+0
-2
lines changed

docker/transport/sshconn.py

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,9 +58,7 @@ def f():
5858
env.pop('SSL_CERT_FILE', None)
5959

6060
self.proc = subprocess.Popen(
61-
' '.join(args),
6261
env=env,
63-
shell=True,
6462
stdout=subprocess.PIPE,
6563
stdin=subprocess.PIPE,
6664
preexec_fn=None if constants.IS_WINDOWS_PLATFORM else preexec_func)

0 commit comments

Comments
 (0)