1. Home
  2. Security Advisories
  3. Red Hat
  4. RHSA-2022:7343

[RHSA-2022:7343] pcs security update

Severity Important
Affected Packages 6
CVEs 3
Info Packages References Vulnerabilities

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

  • rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123)

  • jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package Affected Version
pkg:rpm/redhat/pcs?arch=x86_64&distro=redhat-7.9 < 0.9.169-3.el7_9.3
pkg:rpm/redhat/pcs?arch=s390x&distro=redhat-7.9 < 0.9.169-3.el7_9.3
pkg:rpm/redhat/pcs?arch=ppc64le&distro=redhat-7.9 < 0.9.169-3.el7_9.3
pkg:rpm/redhat/pcs-snmp?arch=x86_64&distro=redhat-7.9 < 0.9.169-3.el7_9.3
pkg:rpm/redhat/pcs-snmp?arch=s390x&distro=redhat-7.9 < 0.9.169-3.el7_9.3
pkg:rpm/redhat/pcs-snmp?arch=ppc64le&distro=redhat-7.9 < 0.9.169-3.el7_9.3
ID
RHSA-2022:7343
Severity
important
URL
https://access.redhat.com/errata/RHSA-2022:7343
Published
2022-11-02T00:00:00
(22 months ago)
Modified
2022-11-02T00:00:00
(22 months ago)
Rights
Copyright 2022 Red Hat, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/pcs?arch=x86_64&distro=redhat-7.9 redhat pcs < 0.9.169-3.el7_9.3 redhat-7.9 x86_64
Affected pkg:rpm/redhat/pcs?arch=s390x&distro=redhat-7.9 redhat pcs < 0.9.169-3.el7_9.3 redhat-7.9 s390x
Affected pkg:rpm/redhat/pcs?arch=ppc64le&distro=redhat-7.9 redhat pcs < 0.9.169-3.el7_9.3 redhat-7.9 ppc64le
Affected pkg:rpm/redhat/pcs-snmp?arch=x86_64&distro=redhat-7.9 redhat pcs-snmp < 0.9.169-3.el7_9.3 redhat-7.9 x86_64
Affected pkg:rpm/redhat/pcs-snmp?arch=s390x&distro=redhat-7.9 redhat pcs-snmp < 0.9.169-3.el7_9.3 redhat-7.9 s390x
Affected pkg:rpm/redhat/pcs-snmp?arch=ppc64le&distro=redhat-7.9 redhat pcs-snmp < 0.9.169-3.el7_9.3 redhat-7.9 ppc64le
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date