UbuntuUpdates.org

Package "crmsh-doc"

Name: crmsh-doc

Description:

crmsh HTML Documentation
Latest version: 4.2.0-2ubuntu1.1
Release: focal (20.04)
Level: updates
Repository: main
Head package: crmsh
Homepage: http://crmsh.github.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "crmsh-doc"

All arch deb package
APT INSTALL

Other versions of "crmsh-doc" in Focal

Repository Area Version
base main 4.2.0-2ubuntu1
security main 4.2.0-2ubuntu1.1

Changelog

Version: 4.2.0-2ubuntu1.1 2024-03-25 17:06:56 UTC

  crmsh (4.2.0-2ubuntu1.1) focal-security; urgency=medium

  * SECURITY UPDATE: Arbitrary code execution
    - debian/patches/CVE-2020-35459.patch: using
      Path.mkdir instead mkdir command in crmsh/history.py,
      crmsh/utils.py.
    - CVE-2020-35459

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 19 Mar 2024 13:35:12 -0300
CVE-2020-35459 An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute comma


About   -   Send Feedback to @ubuntu_updates