Red Hat Security AdvisoryRHSA-2023:2652
pcs security and bug fix update
Released 2023-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HighAvailability (v. 9) pcs-0.11.4-7.el9_2, pcs-snmp-0.11.4-7.el9_2
- Red Hat Enterprise Linux ResilientStorage (v. 9) pcs-0.11.4-7.el9_2, pcs-snmp-0.11.4-7.el9_2
Fixes 3 records
Priority MEDIUM 51
It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was prev…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2023-05-17 · Fixed
Priority MEDIUM 42
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0183 · Published 2023-03-10 · Partial fix · 2.0.9.3, 2.1.4.3 +2 CWE-400
Priority LOW 26
There is a denial of service vulnerability in the header parsing component of Rack.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01058 · Published 2025-01-09 · Partial fix · 2.2.6.4, 3.0.6.1
