In scripts/licensecheck.pl, there is code segment vulnerable to argument injection.
my $mime = `file --brief --mime --dereference $file`;
Created devscripts tracking bugs for this issue:
Affects: fedora-all [bug 1249647]
devscripts-2.15.8-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
devscripts-2.15.8-1.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.