Fix: fix CVE-2020-28243

errorcode7 · errorcode7 · commit 5addb2114b2f · 2021-11-11T13:07:45.000+08:00
Signed-off-by: liubo &lt;liubo@uniontech.com&gt;
diff --git a/docker/transport/sshconn.py b/docker/transport/sshconn.py
@@ -58,9 +58,8 @@ def f():
         env.pop('SSL_CERT_FILE', None)
 
         self.proc = subprocess.Popen(
-            ' '.join(args),
+            args,
             env=env,
-            shell=True,
             stdout=subprocess.PIPE,
             stdin=subprocess.PIPE,
             preexec_fn=None if constants.IS_WINDOWS_PLATFORM else preexec_func)
