Red Hat Security Advisory

RHSA-2025:19948

pcs security update

Released 2025-11-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability AUS (v.8.4) pcs-0.10.8-1.el8_4.8, pcs-snmp-0.10.8-1.el8_4.8
Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) pcs-0.10.8-1.el8_4.8, pcs-snmp-0.10.8-1.el8_4.8

TI-2025-38165 CVE-2025-61772 · GHSA-wpv5-97wm-hp9c

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38163 CVE-2025-61770 · GHSA-p543-xpfm-54cp

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38164 CVE-2025-61771 · GHSA-w9pc-fmgc-vxvw

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-37269 CVE-2025-59830 · GHSA-625h-95r8-8xpm

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2025-09-25 Partial fix · 2.2.18 CWE-400

TI-2025-38268 CVE-2025-61919 · GHSA-6xw4-3v39-52mm

LOW 34

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00648 Published 2025-10-10 Partial fix · 2.2.20, 3.1.18 +1 CWE-400