CVE-2015-5705

CVE-2015-5705 affects devscripts prior to 2.15.7. The issue allows remote attackers to overwrite arbitrary files via a crafted symlink and filename, due to an argument injection vulnerability in devscripts. Impact is arbitrary file writes; several advisories note fixes in 2.15.7 and later (e.g., ...

CVE-2015-5704

CVE-2015-5704 affects the Debian devscripts package: the licensecheck component in scripts/licensecheck.pl allows local users to execute arbitrary shell commands due to insufficient input filtering. This is observed in multiple advisories (Debian, Fedora, OSV, NVD) and related trackers, with fixe...