Red Hat Bugzilla – Bug 1249645
CVE-2015-5705 devscripts: argument injection vulnerability
Last modified: 2015-08-15 06:34:54 EDT
In scripts/licensecheck.pl, there is code segment vulnerable to argument injection.
my $mime = `file --brief --mime --dereference $file`;
Created devscripts tracking bugs for this issue:
Affects: fedora-all [bug 1249647]
devscripts-2.15.8-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
devscripts-2.15.8-1.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.