Public bug reported: Binary package hint: swish-e
Architecture: amd64 Version: 2.4.3-4 The doc talks about using " '%p' " to guard against spaces in filenames. That breaks the moment the filename contains a single quote, and may well have other problems. This looks like a security bug (as soon as swish-e is run with more priviledges than the user who controls filenames has). ** Affects: swish-e (Ubuntu) Importance: Undecided Status: Unconfirmed ** This bug has been flagged as a security issue -- Filename quoting problem https://launchpad.net/bugs/78313 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs