[CLSA-2026:1793022498] pcs: Fix of CVE-2022-29970
Type:
security
Severity:
Important
Release date:
2026-10-26 13:48:28 UTC
Description:
- fix CVE-2022-29970: reject static file paths that escape public_folder in bundled rubygem sinatra
CVEs fixed:
Updated packages:
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.i686.rpm
    sha:0161799a79fe262d4ea33e1c8b98fa7c6e5b0b1c783fac3d92c4d5944e3e43e9
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.x86_64.rpm
    sha:e22c8163c88b38c016b8e3c3c51e967818ba36de44643c7f48b3e16c40d4fbbb
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.i686.rpm
    sha:a1ff3e4f9af9580fe131af81432256b79d18b9023fedca4780d88fcd771170ca
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.x86_64.rpm
    sha:716a10b6b91c6d8349572ade5f91351772015d8c724b81efd9edebb8ab0ba49b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.