Red Hat Security Advisory

RHSA-2025:19647

pcs security update

Released 2025-11-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability E4S (v.8.8) pcs-0.10.15-4.el8_8.9, pcs-snmp-0.10.15-4.el8_8.9
Red Hat Enterprise Linux High Availability TUS (v.8.8) pcs-0.10.15-4.el8_8.9, pcs-snmp-0.10.15-4.el8_8.9

TI-2025-38165 CVE-2025-61772 · GHSA-wpv5-97wm-hp9c

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38163 CVE-2025-61770 · GHSA-p543-xpfm-54cp

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38164 CVE-2025-61771 · GHSA-w9pc-fmgc-vxvw

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-37269 CVE-2025-59830 · GHSA-625h-95r8-8xpm

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2025-09-25 Partial fix · 2.2.18 CWE-400

TI-2025-38268 CVE-2025-61919 · GHSA-6xw4-3v39-52mm

LOW 34

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00648 Published 2025-10-10 Partial fix · 2.2.20, 3.1.18 +1 CWE-400