Red Hat Security AdvisoryRHSA-2020:2670
pcs security and bug fix update
Released 2020-06-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux High Availability EUS (v. 8.1) pcs-0.10.2-4.el8_1.1, pcs-snmp-0.10.2-4.el8_1.1
- Red Hat Enterprise Linux Resilient Storage EUS (v. 8.1) pcs-0.10.2-4.el8_1.1, pcs-snmp-0.10.2-4.el8_1.1
Fixes 1 record
Priority MEDIUM 43
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06811 · Published 2020-04-28 · Partial fix · 2.3.0 CWE-20