Skip to content

Commit 0f4bca4

Browse files
authored
[device/ruijie] Mitigation for security vulnerability sonic-net#11779
Signed-off-by: maipbui [email protected] Why I did it The xml.etree.ElementTree module is not secure against maliciously constructed data. How I did it Remove xml. Use lxml XML parsers package that prevent potentially malicious operation.
1 parent fb774dd commit 0f4bca4

File tree

1 file changed

+1
-1
lines changed
  • device/ruijie/x86_64-ruijie_b6510-48vs8cq-r0

1 file changed

+1
-1
lines changed

device/ruijie/x86_64-ruijie_b6510-48vs8cq-r0/monitor.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@
66
* PSU
77
"""
88
import os
9-
import xml.etree.ElementTree as ET
109
import glob
10+
from lxml import etree as ET
1111

1212
MAILBOX_DIR = "/sys/bus/i2c/devices/"
1313
PORTS_DIR = "/sys/class/net/"

0 commit comments

Comments
 (0)