Lucene search

K
osvGoogleOSV:ALSA-2022:4587
HistoryMay 18, 2022 - 12:00 a.m.

Important: pcs security update

2022-05-1800:00:00
Google
osv.dev
11
security update
pcs packages
pacemaker
corosync
sinatra
path traversal
cve-2022-29970
command-line configuration system
static files
references
cvss score

EPSS

0.002

Percentile

61.2%

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):

  • sinatra: path traversal possible outside of public_dir when serving static files (CVE-2022-29970)
    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.