licensecheck: Use Dpkg::IPC to run file command
The command being run through `` allowed the shell to interpret the
given file argument, which allows arbitrary command execution. Using
Dpkg::IPC avoids the shell, directly executing file.
Closes: #794260
Signed-off-by: James McCoy <jamessan@debian.org>
parent
f43da2ce
Please register or sign in to comment