Debian Security Advisory 1878-2 – Raphael Geissert discovered that uscan, a program to check for availability of new source code versions which is part of the devscripts package, runs Perl code downloaded from potentially untrusted sources to implement its URL and version mangling functionality. This update corrects regressions introduced by the devscripts security update, DSA-1878-1.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81203/dsa-1878-2.txt
Source: https://packetstormsecurity.com/files/81203/Debian-Linux-Security-Advisory-1878-2.html