{"id":"CVE-2022-3560","aliases":["ALSA-2023:1067","ALSA-2023:1572","AZL-13293","DEBIAN-CVE-2022-3560","EUVD-2022-42926","GHSA-w2gm-3gx9-m2p2","OESA-2023-1119","OESA-2023-1159","RHSA-2023:1065","RHSA-2023:1066","RHSA-2023:1067","RHSA-2023:1093","RHSA-2023:1107","RHSA-2023:1572","RHSA-2023:1586","RHSA-2023:1829","RLSA-2023:1067","RLSA-2023:1572","SUSE-SU-2023:0484-1","UBUNTU-CVE-2022-3560","openSUSE-SU-2024:12672-1"],"status":"published","title":"A flaw was found in pesign. The pesign package provides a systemd service used to start the...","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00247,"percentile":0.16106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2023-02-02T00:00:00Z","modified":"2026-11-03T06:02:35Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"pesign","fixed_in":["115-6.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pesign","fixed_in":["0.112-27.el8_7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pesign","fixed_in":["116-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pesign","fixed_in":["116-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"pesign","fixed_in":["0.113-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"pesign","fixed_in":["0.113-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"pesign","fixed_in":["0.113-6.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"pesign","fixed_in":["115-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"pesign","fixed_in":["0:115-6.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"pesign-debuginfo","fixed_in":["0:115-6.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"pesign-debugsource","fixed_in":["0:115-6.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"pesign","fixed_in":["0:0.112-25.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-25.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-25.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pesign","fixed_in":["0:115-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pesign-debuginfo","fixed_in":["0:115-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pesign-debugsource","fixed_in":["0:115-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"pesign","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"pesign-debuginfo","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pesign","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pesign-debuginfo","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"pesign","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"pesign-debuginfo","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pesign","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pesign-debuginfo","fixed_in":["0:0.109-11.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pesign","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"pesign","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"pesign","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-25.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pesign","fixed_in":["0:0.112-27.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-27.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-27.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"pesign","fixed_in":["0:0.112-25.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-25.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-25.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pesign","fixed_in":["0:0.112-27.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pesign-debuginfo","fixed_in":["0:0.112-27.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pesign-debugsource","fixed_in":["0:0.112-27.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"pesign","fixed_in":["0:115-6.el9_1.rocky.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pesign","fixed_in":["0:0.112-27.el8_7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"pesign","fixed_in":["0.112-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pesign","fixed_in":["113-11.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-6.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-27.el8_7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.112-32"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.112-6","116-1","116-2","116-3","116-4","116-5","116-6","116-7","116-8","116-8.1","117-1","117-2"]},{"source":"osv","ecosystem":"Debian:13","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"116-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"116-1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-6.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.109-11.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-25.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pesign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pesign-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:115-6.el9_1.rocky.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-27.el8_7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.110-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.112-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.112-5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.112-6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.112-6","116-6","116-7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["116-8","116-8.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["116-8.1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["116-8.1","116-8.1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pesign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"113-11.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"microsoft","product":"pesign"},{"vendor":"pesign_project","product":"pesign"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135420#c0","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3560","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-w2gm-3gx9-m2p2"},{"url":"https://access.redhat.com/errata/RHSA-2023:1067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3560","tags":["report"]},{"url":"https://bugzilla.redhat.com/2135420","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-1067.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1572","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-1572.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3560","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1119","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1159","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1065","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135420","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1065.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3560","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1066","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1066.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1067.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1093","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1093.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1107","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1107.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1572.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1586","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1586.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1829","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1829.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1067","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1572","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230484-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202933","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3560","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-3560","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/01/31/6","tags":["report"]},{"url":"https://github.com/rhboot/pesign/commit/d8a8c259994d0278c59b30b41758a8dd0abff998","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-3560","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T00:00:00Z","modified":"2025-03-26T18:27:32.379Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-42926","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T00:00:00Z","modified":"2025-03-26T18:27:32Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:50.922534Z"}],"ghsa":[{"id":"GHSA-w2gm-3gx9-m2p2","title":"A flaw was found in pesign. The pesign package provides a systemd service used to start the...","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T21:33:35Z","modified":"2023-02-18T05:05:36Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:54:10.14247Z"}],"nvd":[{"id":"CVE-2022-3560","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T21:22:38.193Z","modified":"2026-06-17T04:59:44.777Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:36.026349Z"}],"osv":[{"id":"AZL-13293","title":"CVE-2022-3560 affecting package pesign 0.112-32","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T21:22:38Z","modified":"2026-04-21T04:22:47.769257Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"CVE-2022-3560","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T21:22:38.193Z","modified":"2026-03-14T11:48:29.13597Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:26.195407Z"},{"id":"DEBIAN-CVE-2022-3560","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T21:22:38.193Z","modified":"2026-11-03T08:01:32.199628887Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2023-1119","title":"pesign security update","description":"pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the \u0026apos;pesign\u0026apos; group. However, the script doesn\u0026apos;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)","status":"published","published":"2023-02-24T11:05:35Z","modified":"2026-08-18T01:17:31.65070254Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1159","title":"pesign security update","description":"pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the \u0026apos;pesign\u0026apos; group. However, the script doesn\u0026apos;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)","status":"published","published":"2023-03-17T11:05:38Z","modified":"2026-08-18T01:17:37.875999822Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:1065","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:30:47Z","modified":"2025-11-22T12:46:30Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1066","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:30:56Z","modified":"2025-11-22T12:46:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1067","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:30:37Z","modified":"2025-11-22T12:46:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1093","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:31:05Z","modified":"2025-11-22T12:46:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1107","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:31:15Z","modified":"2025-11-22T12:46:38Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1572","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:31:33Z","modified":"2025-11-22T12:47:32Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1586","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:31:24Z","modified":"2025-11-22T12:47:35Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1829","title":"Red Hat Security Advisory: pesign security update","status":"published","published":"2024-09-16T10:31:42Z","modified":"2025-11-22T12:48:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RLSA-2023:1572","title":"Important: pesign security update","description":"The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.\n\nSecurity Fix(es):\n\n* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-06T15:52:43.18089Z","modified":"2026-02-04T23:15:05.166013Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-3560","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","status":"published","published":"2023-02-02T21:22:00Z","modified":"2026-10-17T12:55:59.099166832Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2023:1067","title":"Important: pesign security update","description":"The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.\n\nSecurity Fix(es):\n\n* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2026-10-29T11:31:23.634485753Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:1572","title":"Important: pesign security update","description":"The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.\n\nSecurity Fix(es):\n\n* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-04T00:00:00Z","modified":"2026-10-29T11:01:59.95615752Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"openSUSE-SU-2024:12672-1","title":"pesign-113-11.1 on GA media","description":"These are all security issues fixed in the pesign-113-11.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:12.176661Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"RLSA-2023:1067","title":"Important: pesign security update","description":"The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.\n\nSecurity Fix(es):\n\n* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-03-08T16:38:25.971989Z","modified":"2026-02-04T18:30:08.643521Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"SUSE-SU-2023:0484-1","title":"Security update for pesign","description":"This update for pesign fixes the following issues:\n\n  - CVE-2022-3560: Fixed pesign-authorize ExecStartPost script allowing privilege escalation from pesign to root (bsc#1202933).\n","status":"published","published":"2023-02-23T09:26:51Z","modified":"2026-02-04T02:50:36.068559Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}