High ELSA-2022-9416 1 CVE

Important: pcs security update (Oracle Linux 8)

Published May 20, 2022 · Updated May 20, 2022

Ecosystem: Oracle Linux

Summary

[0.10.12-6.0.1.el8_6.1]
- Replace HAM-logo.png with a generic one

[0.10.12-6.el8_6.1]
- Updated bundled rubygems: sinatra, rack-protection
- Resolves: rhbz#2081331

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	pcs	0:0.10.12-6.0.1.el8_6.1
Oracle Linux · 8	pcs-snmp	0:0.10.12-6.0.1.el8_6.1

Vulnerabilities 1

High 7.5

CVE-2022-29970

sinatra does not validate expanded path matches

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

sinatra ruby-sinatra ruby-sinatra Debian Ubuntu RubyGems

May 2, 2022