CVE-2015-5705

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-August/163705.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.html · Third Party Advisory
• openwall.com/lists/oss-security/2015/08/01/7 · Mailing List
• anonscm.debian.org/cgit/collab-maint/devscripts.git/commit · Patch
• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

devscripts のその他の脆弱性

• CVE-2015-5704高 7.8scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
• CVE-2014-1833中 5.0Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar …
• CVE-2013-6888高 7.5Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
• CVE-2013-7085中 5.8Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in…
• CVE-2013-7050中 6.8The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exe…