Red Hat Security Advisory

RHSA-2026:2465

pcs security update

Released 2026-02-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability E4S (v.8.8) pcs-0.10.15-4.el8_8.10, pcs-snmp-0.10.15-4.el8_8.10
Red Hat Enterprise Linux High Availability TUS (v.8.8) pcs-0.10.15-4.el8_8.10, pcs-snmp-0.10.15-4.el8_8.10

TI-2025-41422 CVE-2025-67726 · GHSA-jhmp-mqwm-3gq8

MEDIUM 40

Tornado is a Python web framework and asynchronous networking library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00535 Published 2025-12-12 Partial fix · 6.5.3 CWE-400

TI-2025-41421 CVE-2025-67725 · GHSA-c98p-7wgm-6p64

MEDIUM 40

Tornado is a Python web framework and asynchronous networking library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00559 Published 2025-12-12 Partial fix · 6.5.3 CWE-400

TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg

MEDIUM 40

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01823 Published 2026-01-21 Partial fix · 4.17.23, 4.18.0 CWE-1321