CVE-2018-13043

CVE-2018-13043 affects Debian devscripts up to 2.18.3, where scripts/grep-excuses.pl loads YAML unsafely (YAML::Syck without blessing), enabling code execution. Other advisories (Ubuntu USN-3704-1, Fedora updates) reference the same issue and indicate fixes to devscripts 2.18.4. The vulnerability...

CVE-2025-8454

The uscan tool, which is part of the devscripts collection used by Debian Package maintainers, contains a vulnerability where it skips OpenPGP verification for upstream software releases if the source was already downloaded in a previous run, even if the initial verification failed. This flaw cou...