[CLSA-2026:1794070811] pcs: Fix of CVE-2022-29970
Type:
security
Severity:
Important
Release date:
2026-11-07 17:00:21 UTC
Description:
- fix CVE-2022-29970: reject static file paths that escape public_folder in bundled rubygem sinatra
CVEs fixed:
Updated packages:
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.i686.rpm
    sha:6d2a76fba1473e44cade2202747e362cc1508a859cad83b183a117225c27b406
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els2.x86_64.rpm
    sha:7d2ff79414f7919a8e3118d42bed3159f40f64019baf69da5ca268a310892a0a
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.i686.rpm
    sha:01d726b824ff844dca29233664e61e874e71cc212d8bdd4f1914e7129482fb38
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els2.x86_64.rpm
    sha:e77a83cb715df3e7da9ba44e2a10c5fc59ea53a56fa25995c257b17230503cef
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.