Debian/pagure: high 8.1
A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of
Action: Upgrade pagure to 5.14.1+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.14.1+dfsg-1 | - |
Fixed versions
| 5.14.1+dfsg-1 |
Sources
published · modified · JSON