tocsin

Debian/devscripts: unknown

The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a direct

Action: Upgrade devscripts to 2.13.8 or later.

Affected

introducedfixedlast affected
02.13.8-

Fixed versions

2.13.8

Sources

published · modified · JSON