RLSA-2022:6313

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2022:6313.json

Related

• CVE-2022-2735

Published

2022-09-01T15:00:39Z

Modified

2023-02-02T14:15:11.243865Z

Summary

Important: pcs security update

Details

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

• pcs: obtaining an authentication token for hacluster user could lead to privilege escalation (CVE-2022-2735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

• https://errata.rockylinux.org/RLSA-2022:6313
• https://bugzilla.redhat.com/show_bug.cgi?id=2116815