Red Hat Security Advisory

RHSA-2025:21036

pcs security update

Released 2025-11-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability (v. 10) cockpit-ha-cluster-0.12.1-1.el10_1.1, pcs-0.12.1-1.el10_1.1, pcs-snmp-0.12.1-1.el10_1.1

TI-2025-38165 CVE-2025-61772 · GHSA-wpv5-97wm-hp9c

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38163 CVE-2025-61770 · GHSA-p543-xpfm-54cp

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38164 CVE-2025-61771 · GHSA-w9pc-fmgc-vxvw

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-37269 CVE-2025-59830 · GHSA-625h-95r8-8xpm

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2025-09-25 Partial fix · 2.2.18 CWE-400

TI-2025-38268 CVE-2025-61919 · GHSA-6xw4-3v39-52mm

LOW 34

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00648 Published 2025-10-10 Partial fix · 2.2.20, 3.1.18 +1 CWE-400