Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
172
security advisorycriticalremote code executionUbuntu 24.04 LTS Pagure Critical Security Flaws USN-7984-1
Several security issues were fixed in Pagure.. ========================================================================== Ubuntu Security Notice USN-7984-1 January 29, 2026 pagure vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Pagure. Software Description: - pagure: A git-centered forge using pygit2 Details: Thomas Chauchefoin discovered that Pagure incorrectly handled symbolic links in Git repositories. A remote attacker could possibly use this issue to cause Pagure to expose files outside the intended repository boundaries. (CVE-2024-4981) Thomas Chauchefoin discovered that Pagure did not properly sanitize path inputs. A remote attacker could possibly use this issue to read arbitrary files. (CVE-2024-4982) Thomas Chauchefoin discovered that Pagure incorrectly handled symbolic links during repository archiving. A remote attacker could possibly use this issue to disclose local files on the server. (CVE-2024-47515) Thomas Chauchefoin discovered that Pagure incorrectly handled certain inputs. A remote attacker could possibly use this issue to execute arbitrary code on the server. (CVE-2024-47516) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS pagure 5.11.3+dfsg-2.1ubuntu0.2 Ubuntu 22.04 LTS pagure 5.11.3+dfsg-1ubuntu0.1 Ubuntu 20.04 LTS pagure 5.8.1+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7984-1 CVE-2024-47515, CVE-2024-47516, CVE-2024-4981, CVE-2024-4982 Package Information: https://launchpad.net/ubuntu/+source/pagure/5.11.3+dfsg-2.1ubuntu0.2 https://launchpad.net/ubuntu/+source/pagure/5.11.3+dfsg-1ubuntu0.1 . Multiple security flaws in Pagure on Ubuntu allow attackers to read files and execute arbitrary code.. Pagure security fix, Ubuntu advisory, remote code execution threat, symbolic link vulnerability. . Severity: Critical. LinuxSecurity.com Team
Feb 04, 2026
•Critical
Ubuntu
197
security advisorysecurity issueremote code executionDebian 11: Pagure Critical Issues DLA-4390-1 CVE-2024-4981 CVE-2024-4982
Multiple vulnerabilities have been discovered in Pagure, a Git-centered code hosting system (forge). . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4390-1
Dec 01, 2025
•Critical
Debian LTS
203
security advisorysecurity issueupdateMageia 7: 2021-0206 Important Advisory for Pagure XSS Threat
Pagure before 5.6 allows XSS via the templates/blame.html blame view. References: - https://bugs.mageia.org/show_bug.cgi?id=27487 - https://bugzilla.suse.com/show_bug.cgi?id=1176987 . MGASA-2021-0206 - Updated pagure packages fix a security vulnerability Publication date: 07 May 2021 URL: https://advisories.mageia.org/MGASA-2021-0206.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-11556 Pagure before 5.6 allows XSS via the templates/blame.html blame view. References: - https://bugs.mageia.org/show_bug.cgi?id=27487 - https://bugzilla.suse.com/show_bug.cgi?id=1176987 - https://pagure.io/pagure/c/31a0d2950ed409550074ca52ba492f9b87ec3318 - https://www.cve.org/CVERecord?id=CVE-2019-11556 SRPMS: - 7/core/pagure-5.5-1.1.mga7 . Recent updates to Pagure packages tackle a critical XSS security flaw in Mageia, providing solutions for vulnerabilities discovered on 07 May 2021.. Mageia XSS Update, Pagure Security Fix, Mageia Advisory, Software Security Update. . Severity: Important. LinuxSecurity.com Team
May 07, 2021
•Important
Mageia
202
security advisorymoderateupdateopenSUSE: 2020:1810-1 moderate vulnerability: pagure XSS resolution
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for pagure ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1810-1 Rating: moderate References: #1176987 Cross-References: CVE-2019-11556 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pagure fixes the following issues: - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view (boo#1176987) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1810=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): pagure-5.5-bp151.2.3.1 pagure-ci-5.5-bp151.2.3.1 pagure-ev-5.5-bp151.2.3.1 pagure-loadjson-5.5-bp151.2.3.1 pagure-logcom-5.5-bp151.2.3.1 pagure-milters-5.5-bp151.2.3.1 pagure-mirror-5.5-bp151.2.3.1 pagure-theme-chameleon-5.5-bp151.2.3.1 pagure-theme-default-openSUSE-5.5-bp151.2.3.1 pagure-theme-default-upstream-5.5-bp151.2.3.1 pagure-theme-pagureio-5.5-bp151.2.3.1 pagure-theme-srcfpo-5.5-bp151.2.3.1 pagure-theme-upstream-5.5-bp151.2.3.1 pagure-webhook-5.5-bp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-11556.html https://bugzilla.suse.com/1176987 -- . openSUSE announces a critical patch for pagure, tackling identified XSS security flaws and offering step-by-step update guidelines.. openSUSE Security, Pagure Update, Moderate Threat, Software Patch. .LinuxSecurity.com Team
Nov 01, 2020
OpenSUSE
202
security advisorymoderateupdateopenSUSE Leap 15.1: openSUSE-SU-2020:1765-1 Moderate: Pagure XSS Issue
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for pagure ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1765-1 Rating: moderate References: #1176987 Cross-References: CVE-2019-11556 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pagure fixes the following issues: - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view (boo#1176987) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1765=1 Package List: - openSUSE Leap 15.1 (noarch): pagure-5.5-lp151.2.3.1 pagure-ci-5.5-lp151.2.3.1 pagure-ev-5.5-lp151.2.3.1 pagure-loadjson-5.5-lp151.2.3.1 pagure-logcom-5.5-lp151.2.3.1 pagure-milters-5.5-lp151.2.3.1 pagure-mirror-5.5-lp151.2.3.1 pagure-theme-chameleon-5.5-lp151.2.3.1 pagure-theme-default-openSUSE-5.5-lp151.2.3.1 pagure-theme-default-upstream-5.5-lp151.2.3.1 pagure-theme-pagureio-5.5-lp151.2.3.1 pagure-theme-srcfpo-5.5-lp151.2.3.1 pagure-theme-upstream-5.5-lp151.2.3.1 pagure-webhook-5.5-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-11556.html https://bugzilla.suse.com/1176987 -- . Critical medium openSUSE patch for pagure addresses CSRF flaw with Advisory ID openSUSE-SU-2021:1789-1.. openSUSE Update, Security Patch, XSS Exploit Fix, pagure Security. . LinuxSecurity.com Team
Oct 29, 2020
OpenSUSE
89
security advisorymoderatesecurity updateFedora 29: Security Advisory for Pagure 5.3 Moderate API Key Leak
Update to Pagure 5.3, which includes the fix for CVE-2019-7628.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-4e72b179e4 2019-02-24 02:32:36.926170 --------------------------------------------------------------------------------Name : pagure Product : Fedora 29 Version : 5.3 Release : 1.fc29 URL : https://pagure.io/pagure Summary : A git-centered forge Description : Pagure is a light-weight git-centered forge based on pygit2. Currently, Pagure offers a web-interface for git repositories, a ticket system and possibilities to create new projects, fork existing ones and create/merge pull-requests across or within projects. --------------------------------------------------------------------------------Update Information: Update to Pagure 5.3, which includes the fix for CVE-2019-7628. --------------------------------------------------------------------------------ChangeLog: * Fri Feb 22 2019 Neal Gompa - 5.3-1 - Update to 5.3 - Add weak dependencies for supported database client libraries - Use macros consistently in the spec * Fri Feb 1 2019 Fedora Release Engineering - 5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 7 2019 Neal Gompa - 5.2-2 - Ensure all shebangs are set to the correct Python version - Fix RHEL conditionals to account for EL8 - Fix pygit2 dependency for EL7 * Mon Jan 7 2019 Neal Gompa - 5.2-1 - Update to 5.2 * Fri Dec 14 2018 Neal Gompa - 5.1.4-2 - Backport fix from master to add compatibility with Markdown 3.0+ - Backport fix from master to properly skip legacy hooks * Tue Oct 30 2018 Neal Gompa - 5.1.4-1 - Update to 5.1.4 * Thu Oct 11 2018 Neal Gompa - 5.1.3-1 - Update to 5.1.3 (RH#1638470) * Tue Oct 9 2018 Neal Gompa - 5.1.1-1 - Update to 5.1.1 (RH#1637595) * Tue Oct 9 2018 Neal Gompa - 5.1-1 - Update to 5.1(RH#1637516) --------------------------------------------------------------------------------References: [ 1 ] Bug #1673985 - CVE-2019-7628: Pagure version 5.2 leaks API keys by e-mail [fedora-29] https://bugzilla.redhat.com/show_bug.cgi?id=1673985 [ 2 ] Bug #1680027 - pagure-5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1680027 [ 3 ] Bug #1673984 - CVE-2019-7628: Pagure version 5.2 leaks API keys by e-mail [fedora-rawhide] https://bugzilla.redhat.com/show_bug.cgi?id=1673984 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-4e72b179e4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 24, 2019
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!