Comment 6 for bug 414298

Revision history for this message
Daniel Holbach (dholbach) wrote :

2.10.54 is out and has a security fix:
 * uscan: Evaluate mangle rules without evaluating them directly as Perl
    code to avoid the possibility of remote code execution. This is
    CVE-2009-2946. As a side effect, (Closes: #515209)

The old merge seems to mostly apply:
daniel@bert:~/devscripts-2.10.54$ patch -p1 < ../devscripts*diff
patching file debian/changelog
Hunk #1 FAILED at 1.
Hunk #2 succeeded at 289 (offset 71 lines).
Hunk #3 succeeded at 713 (offset 71 lines).
Hunk #4 succeeded at 1293 (offset 71 lines).
Hunk #5 succeeded at 2195 (offset 71 lines).
Hunk #6 succeeded at 2295 (offset 71 lines).
Hunk #7 succeeded at 2368 (offset 71 lines).
Hunk #8 succeeded at 2487 (offset 71 lines).
Hunk #9 succeeded at 2603 (offset 71 lines).
Hunk #10 succeeded at 2663 (offset 71 lines).
Hunk #11 succeeded at 2756 (offset 71 lines).
Hunk #12 succeeded at 2885 (offset 71 lines).
Hunk #13 succeeded at 3044 (offset 71 lines).
1 out of 13 hunks FAILED -- saving rejects to file debian/changelog.rej
patching file debian/control
Hunk #1 FAILED at 1.
1 out of 1 hunk FAILED -- saving rejects to file debian/control.rej
patching file debian/rules
patching file scripts/debchange.1
Hunk #1 succeeded at 221 (offset 1 line).
patching file scripts/debchange.pl
Hunk #1 succeeded at 115 (offset 2 lines).
Hunk #2 succeeded at 148 (offset 2 lines).
Hunk #3 succeeded at 186 (offset 2 lines).
Hunk #4 succeeded at 304 (offset 2 lines).
Hunk #5 succeeded at 325 (offset 2 lines).
Hunk #6 succeeded at 388 (offset 2 lines).
Hunk #7 succeeded at 400 (offset 2 lines).
Hunk #8 succeeded at 450 (offset 3 lines).
Hunk #9 succeeded at 564 (offset 3 lines).
Hunk #10 succeeded at 738 (offset 4 lines).
Hunk #11 succeeded at 873 (offset 4 lines).
Hunk #12 succeeded at 950 (offset 4 lines).
Hunk #13 succeeded at 1024 (offset 4 lines).
Hunk #14 FAILED at 1042.
Hunk #15 succeeded at 1093 (offset 15 lines).
Hunk #16 FAILED at 1142.
Hunk #17 succeeded at 1418 (offset 15 lines).
2 out of 17 hunks FAILED -- saving rejects to file scripts/debchange.pl.rej
patching file scripts/debsign.1
patching file scripts/debsign.sh
patching file scripts/debuild.pl
patching file scripts/dscverify.pl
patching file scripts/rmadison.pl
patching file scripts/uupdate.1
patching file scripts/uupdate.sh
patching file test/debchange.pl
patching file test/Makefile
daniel@bert:~/devscripts-2.10.54$

Ahmed: can you take a look at it?