Synopsis: Important: pcs security update
Advisory ID: SLSA-2022:7343-1
Issue Date: 2022-11-03
CVE Numbers: CVE-2019-11358
CVE-2022-30123
—
Security Fix(es):
* rubygem-rack: crafted requests can cause shell escape sequences
(CVE-2022-30123)
* jquery: Prototype pollution in object’s prototype leading to denial of
service, remote code execution, or property injection (CVE-2019-11358)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
—
SL7
x86_64
pcs-0.9.169-3.el7_9.3.x86_64.rpm
pcs-debuginfo-0.9.169-3.el7_9.3.x86_64.rpm
pcs-snmp-0.9.169-3.el7_9.3.x86_64.rpm
– Scientific Linux Development Team
