tocsin

Debian/pagure: critical 9.8

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance.

Action: Upgrade pagure to 5.14.1+dfsg-1 or later.

Affected

introducedfixedlast affected
05.14.1+dfsg-1-

Fixed versions

5.14.1+dfsg-1

Sources

published · modified · JSON