Vulmon
Amazon Linux 2 Security Advisory: ALAS-2022-1895
Advisory Release Date: 2022-12-01 20:31 Pacific
Advisory Updated Date: 2022-12-06 22:40 Pacific
Severity:
Important
Issue Overview:
A denial of service flaw was found in ruby-rack. An attacker crafting multipart POST requests can cause Rack's multipart parser to take much longer than expected, leading to a denial of service. (CVE-2022-30122)
A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's `Lint` middleware and `CommonLogger` middleware. This issue can leverage these escape sequences to execute commands in the victim's terminal. (CVE-2022-30123)
Affected Packages:
pcs
Issue Correction:
Run yum update pcs to update your system.
New Packages:
aarch64:
pcs-0.9.169-3.amzn2.1.2.aarch64
pcs-snmp-0.9.169-3.amzn2.1.2.aarch64
pcs-debuginfo-0.9.169-3.amzn2.1.2.aarch64
i686:
pcs-0.9.169-3.amzn2.1.2.i686
pcs-snmp-0.9.169-3.amzn2.1.2.i686
pcs-debuginfo-0.9.169-3.amzn2.1.2.i686
src:
pcs-0.9.169-3.amzn2.1.2.src
x86_64:
pcs-0.9.169-3.amzn2.1.2.x86_64
pcs-snmp-0.9.169-3.amzn2.1.2.x86_64
pcs-debuginfo-0.9.169-3.amzn2.1.2.x86_64