Summary
It was discovered that devscripts incorrectly handled certain YAML files.
An attacker could possibly use this to execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | devscripts | 2.17.12ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because Y…
References
-
report
https://ubuntu.com/security/CVE-2018-13043