CVE-2013-6888

Publication date 7 January 2014

Last updated 24 July 2024

Ubuntu priority

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
devscripts	Upstream: http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git;a=commit;h=02c6850d973e3e1246fde72edab27f03d63acc52 Upstream: http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git;a=commit;h=4b7e58ee6000cdefac0682601cec6ecce0137467