[CLSA-2026:1793030556] pcs: Fix of CVE-2022-29970
Type:
security
Severity:
Important
Release date:
2026-10-26 17:49:35 UTC
Description:
- fix CVE-2022-29970: reject static file paths that escape public_folder in bundled rubygem sinatra
CVEs fixed:
Updated packages:
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.aarch64.rpm
    sha:00c3e3691e37fa746dde20172948ede5f102ce055509e19ab2ca19c96c1de78a
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.i686.rpm
    sha:289e5e04898f8a4ba8330adabd5ee5d422f0934eaa661dc56c306ba69793fb0b
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.x86_64.rpm
    sha:8e65336b957eb24bedf7abb0f34f0ec2d0198c775dee4b26a471b657793686da
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.aarch64.rpm
    sha:17094509d66caff44a5e3822331ab3c11ec8d29d7cfa1f140331cb55b08c3127
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.i686.rpm
    sha:996751c4e397f2497fafe5095b9696b573afe3224c91221af323c009abbbf62c
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.x86_64.rpm
    sha:dc38998e3858349200d68bb9d7104519bf7f2f8e6e672c93023ab785ba954d4c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.