<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 01:39:58 +0000</lastBuildDate>
    <item>
      <title>ALSA-2022:7447 — Moderate: pcs security, bug fix, and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2022:7447</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp&lt;/p&gt;
&lt;p&gt;The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* pcs: improper authentication via PAM (CVE-2022-1049)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;
&lt;p&gt;Additional Changes:&lt;/p&gt;
&lt;p&gt;For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp&lt;/p&gt;
&lt;p&gt;The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* pcs: improper authentication via PAM (CVE-2022-1049)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;
&lt;p&gt;Additional Changes:&lt;/p&gt;
&lt;p&gt;For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2022:7447</guid>
    </item>
    <item>
      <title>bdu:2022-05543</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2022-05543</link>
      <description>bdu:2022-05543</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2022-05543</guid>
    </item>
    <item>
      <title>EUVD-2026-11423</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-11423</link>
      <description>EUVD-2026-11423</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-11423</guid>
    </item>
    <item>
      <title>fkie_cve-2022-1049</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2022-1049</link>
      <description>&lt;p&gt;A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2022-1049</guid>
    </item>
    <item>
      <title>GHSA-hhh9-rwf2-2pp5</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-hhh9-rwf2-2pp5</link>
      <description>&lt;p&gt;A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-hhh9-rwf2-2pp5</guid>
    </item>
    <item>
      <title>gsd-2022-1049</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2022-1049</link>
      <description>gsd-2022-1049</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2022-1049</guid>
    </item>
    <item>
      <title>OESA-2022-1886 — pcs security update</title>
      <link>https://cve.radiocsirt.org/vuln/oesa-2022-1886</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP1: pcs, openEuler:20.03-LTS-SP3: pcs, openEuler:22.03-LTS: pcs&lt;/p&gt;
&lt;p&gt;pcs is a corosync and pacemaker configuration tool.  It permits users to easily view, modify and create pacemaker based clusters.&#13;
&#13;
Security Fix(es):&#13;
&#13;
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.(CVE-2022-1049)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP1: pcs, openEuler:20.03-LTS-SP3: pcs, openEuler:22.03-LTS: pcs&lt;/p&gt;
&lt;p&gt;pcs is a corosync and pacemaker configuration tool.  It permits users to easily view, modify and create pacemaker based clusters.&#13;
&#13;
Security Fix(es):&#13;
&#13;
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.(CVE-2022-1049)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/oesa-2022-1886</guid>
    </item>
    <item>
      <title>RHSA-2022:7447 — Red Hat Security Advisory: pcs security, bug fix, and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2022:7447</link>
      <description>&lt;p&gt;pcs: improper authentication via PAM&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;pcs: improper authentication via PAM&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2022:7447</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2022-1049</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1049</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:22.04:LTS: pcs&lt;/p&gt;
&lt;p&gt;A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:22.04:LTS: pcs&lt;/p&gt;
&lt;p&gt;A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1049</guid>
    </item>
    <item>
      <title>WID-SEC-W-2022-2044 — Red Hat Enterprise Linux: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2044</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2044</guid>
    </item>
  </channel>
</rss>
