(RHSA-2023:0974) Moderate: pcs security update

2023-02-2807:53:55

access.redhat.com

pcs packages

command-line configuration system

pacemaker

corosync

sinatra

reflected file download attack

cve-2022-45442

security update

0.003 Low

EPSS

Percentile

70.2%

JSON

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

sinatra: Reflected File Download attack (CVE-2022-45442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64lepcs-snmp< 0.11.3-4.el9_1.2pcs-snmp-0.11.3-4.el9_1.2.ppc64le.rpm
RedHat9aarch64pcs< 0.11.3-4.el9_1.2pcs-0.11.3-4.el9_1.2.aarch64.rpm
RedHat9x86_64pcs-snmp< 0.11.3-4.el9_1.2pcs-snmp-0.11.3-4.el9_1.2.x86_64.rpm
RedHat9s390xpcs< 0.11.3-4.el9_1.2pcs-0.11.3-4.el9_1.2.s390x.rpm
RedHat9ppc64lepcs< 0.11.3-4.el9_1.2pcs-0.11.3-4.el9_1.2.ppc64le.rpm
RedHat9s390xpcs-snmp< 0.11.3-4.el9_1.2pcs-snmp-0.11.3-4.el9_1.2.s390x.rpm
RedHat9x86_64pcs< 0.11.3-4.el9_1.2pcs-0.11.3-4.el9_1.2.x86_64.rpm
RedHat9aarch64pcs-snmp< 0.11.3-4.el9_1.2pcs-snmp-0.11.3-4.el9_1.2.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	pcs-snmp	< 0.11.3-4.el9_1.2	pcs-snmp-0.11.3-4.el9_1.2.ppc64le.rpm
RedHat	9	aarch64	pcs	< 0.11.3-4.el9_1.2	pcs-0.11.3-4.el9_1.2.aarch64.rpm
RedHat	9	x86_64	pcs-snmp	< 0.11.3-4.el9_1.2	pcs-snmp-0.11.3-4.el9_1.2.x86_64.rpm
RedHat	9	s390x	pcs	< 0.11.3-4.el9_1.2	pcs-0.11.3-4.el9_1.2.s390x.rpm
RedHat	9	ppc64le	pcs	< 0.11.3-4.el9_1.2	pcs-0.11.3-4.el9_1.2.ppc64le.rpm
RedHat	9	s390x	pcs-snmp	< 0.11.3-4.el9_1.2	pcs-snmp-0.11.3-4.el9_1.2.s390x.rpm
RedHat	9	x86_64	pcs	< 0.11.3-4.el9_1.2	pcs-0.11.3-4.el9_1.2.x86_64.rpm
RedHat	9	aarch64	pcs-snmp	< 0.11.3-4.el9_1.2	pcs-snmp-0.11.3-4.el9_1.2.aarch64.rpm