pcs (SL7)

Synopsis: Important: pcs security update
Advisory ID: SLSA-2022:7343-1
Issue Date: 2022-11-03
CVE Numbers: CVE-2019-11358
CVE-2022-30123

Security Fix(es):

* rubygem-rack: crafted requests can cause shell escape sequences
(CVE-2022-30123)

* jquery: Prototype pollution in object’s prototype leading to denial of
service, remote code execution, or property injection (CVE-2019-11358)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE

SL7
x86_64
pcs-0.9.169-3.el7_9.3.x86_64.rpm
pcs-debuginfo-0.9.169-3.el7_9.3.x86_64.rpm
pcs-snmp-0.9.169-3.el7_9.3.x86_64.rpm

– Scientific Linux Development Team