CVE request: uupdate (devscripts) directory traversal

[Murray McAllister <mmcallis () redhat com>]

Hello,

Jakub Wilk reported a directory traversal flaw in uupdate that "can 
trick uupdate into patching files outside the source package directory".

Full details: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737160

Can a CVE please be assigned?

Thanks,

--
Murray McAllister / Red Hat Security Response Team