[CLSA-2026:1793868583] pcs: Fix of CVE-2022-29970
Type:
security
Severity:
Important
Release date:
2026-11-07 00:31:24 UTC
Description:
- fix CVE-2022-29970: reject static file paths that escape public_folder in bundled rubygem sinatra
CVEs fixed:
Updated packages:
  • pcs-0.9.137-1.el7.tuxcare.els1.i686.rpm
    sha:e053b60abfa16044acb191f7871e8600e970d88d3611241ef76a2a1885d05861
  • pcs-0.9.137-1.el7.tuxcare.els1.x86_64.rpm
    sha:2600cf98cd0c1c9427159139879a8d7996bc98861ea70543eeb5145cc7119bb2
  • python-clufter-0.9.137-1.el7.tuxcare.els1.i686.rpm
    sha:0c9ccc5b710d7d90d95bb818cff22715d8490c9a1bc456f13d23ac1c79146911
  • python-clufter-0.9.137-1.el7.tuxcare.els1.x86_64.rpm
    sha:30fe71f71dd72164098492b8e791643d898b591cb52983ebc3c5e1439e02c54b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.