Issued at: 2023-02-22
Updated at: 2023-02-22
Synopsis
Moderate: pcs security update
Description
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* sinatra: Reflected File Download attack (CVE-2022-45442)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
2153363
CVEs
CVE-2022-45442
Affected packages
Rocky Linux 8 aarch64 - HighAvailability
pcs-0:0.10.14-5.el8_7.2.aarch64.rpm
pcs-0:0.10.14-5.el8_7.2.src.rpm
pcs-snmp-0:0.10.14-5.el8_7.2.aarch64.rpm
Rocky Linux 8 aarch64 - ResilientStorage
pcs-0:0.10.14-5.el8_7.2.aarch64.rpm
pcs-0:0.10.14-5.el8_7.2.src.rpm
pcs-snmp-0:0.10.14-5.el8_7.2.aarch64.rpm
Rocky Linux 8 x86_64 - HighAvailability
pcs-0:0.10.14-5.el8_7.2.src.rpm
pcs-0:0.10.14-5.el8_7.2.x86_64.rpm
pcs-snmp-0:0.10.14-5.el8_7.2.x86_64.rpm
Rocky Linux 8 x86_64 - ResilientStorage
pcs-0:0.10.14-5.el8_7.2.src.rpm
pcs-0:0.10.14-5.el8_7.2.x86_64.rpm
pcs-snmp-0:0.10.14-5.el8_7.2.x86_64.rpm