CVE-2014-1833
Published: 5 February 2014
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.
Priority
Status
Package | Release | Status |
---|---|---|
devscripts Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
precise |
Released
(2.11.6ubuntu1.7)
|
|
quantal |
Ignored
(end of life)
|
|
saucy |
Ignored
(end of life)
|
|
trusty |
Released
(2.14.1ubuntu0.1)
|
|
upstream |
Released
(2.14.8)
|
|
utopic |
Released
(2.14.6ubuntu0.1)
|
|
vivid |
Not vulnerable
(2.15.1)
|
|
Patches: upstream: http://anonscm.debian.org/cgit/collab-maint/devscripts.git/diff/?id=0fef671 |