Lucene search
OracleLinuxELSA-2023-3082HistoryMay 29, 2023 - 12:00 a.m.
pcs security update
2023-05-2900:00:00
linux.oracle.com
10
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
16.7%
[0.10.15-4.0.1.el8_8.1]
- Replace HAM-logo.png with a generic one
[0.10.15-4.el8_8.1] - Fix displaying differences between configuration checkpoints in pcs config checkpoint diff command
- Fix pcs stonith update-scsi-devices command which was broken since Pacemaker-2.1.5-rc1
- Updated bundled rubygem rack
- Resolves: rhbz#2180700 rhbz#2180706 rhbz#2180713 rhbz#2180974
[0.10.15-4] - Fixed enabling/disabling sbd when cluster is not running
- Added BuildRequires: pam - needed for tier0 tests during build
- Resolves: rhbz#2166243
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | pcs | < 0.10.15-4.0.1.el8_8.1 | pcs-0.10.15-4.0.1.el8_8.1.src.rpm |
| oracle linux | 8 | aarch64 | pcs | < 0.10.15-4.0.1.el8_8.1 | pcs-0.10.15-4.0.1.el8_8.1.aarch64.rpm |
| oracle linux | 8 | aarch64 | pcs-snmp | < 0.10.15-4.0.1.el8_8.1 | pcs-snmp-0.10.15-4.0.1.el8_8.1.aarch64.rpm |
| oracle linux | 8 | src | pcs | < 0.10.15-4.0.1.el8_8.1 | pcs-0.10.15-4.0.1.el8_8.1.src.rpm |
| oracle linux | 8 | x86_64 | pcs | < 0.10.15-4.0.1.el8_8.1 | pcs-0.10.15-4.0.1.el8_8.1.x86_64.rpm |
| oracle linux | 8 | x86_64 | pcs-snmp | < 0.10.15-4.0.1.el8_8.1 | pcs-snmp-0.10.15-4.0.1.el8_8.1.x86_64.rpm |
Related
nessus
nessus
Debian DLA-3392-1 : ruby-rack - LTS security update
2023-04-17 00:00:00
RHEL 8 : pcs (RHSA-2023:3082)
2023-05-16 00:00:00
RHEL 8 : pcs (RHSA-2023:3403)
2023-05-31 00:00:00
osv
osv
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
Moderate: pcs security and bug fix update
2023-05-18 19:18:23
ruby-rack - security update
2023-04-17 00:00:00
redhat
redhat
(RHSA-2023:3082) Moderate: pcs security and bug fix update
2023-05-16 09:15:08
(RHSA-2023:1961) Moderate: pcs security and bug fix update
2023-04-25 08:12:36
(RHSA-2023:3403) Moderate: pcs security and bug fix update
2023-05-31 15:30:50
rocky
rocky
pcs security and bug fix update
2023-05-18 19:18:23
pcs security and bug fix update
2023-05-25 19:53:02
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
debian
debian
[SECURITY] [DLA 3392-1] ruby-rack security update
2023-04-17 13:57:41
[SECURITY] [DLA 3392-1] ruby-rack security update
2023-04-17 14:31:28
[SECURITY] [DSA 5530-1] ruby-rack security update
2023-10-22 12:35:46
almalinux
almalinux
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
Important: pcs security and bug fix update
2023-05-09 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3392-1)
2023-04-19 00:00:00
Mageia: Security Advisory (MGASA-2024-0042)
2024-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2280-1)
2023-05-25 00:00:00
oraclelinux
oraclelinux
pcs security update
2023-07-20 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-03-17 02:16:44
Denial Of Service (DoS)
2023-03-09 01:51:42
freebsd
freebsd
rack -- possible denial of service vulnerability in header parsing
2023-03-13 00:00:00
rack -- possible DoS vulnerability in multipart MIME parsing
2023-03-03 00:00:00
amazon
amazon
Medium: pcs
2023-04-27 18:36:00
cve
cve
CVE-2023-27530
2023-03-10 22:15:10
CVE-2023-27539
2023-03-15 02:20:20
ubuntucve
ubuntucve
CVE-2023-27530
2023-03-10 00:00:00
CVE-2023-27539
2023-03-22 00:00:00
debiancve
debiancve
CVE-2023-27530
2023-03-10 22:15:10
CVE-2023-27539
2023-03-15 02:20:20
redhatcve
redhatcve
CVE-2023-27530
2023-03-09 00:14:22
CVE-2023-27539
2023-03-19 15:39:04
mageia
mageia
Updated ruby-rack fixes a vulnerability and some bugs
2024-02-19 20:35:05
Updated ruby-rack packages fix security vulnerability
2023-03-24 08:55:49
github
github
Rack has possible DoS Vulnerability in Multipart MIME parsing
2023-03-08 17:20:04
Possible Denial of Service Vulnerability in Rack's header parsing
2023-03-15 21:36:02
prion
prion
Code injection
2023-03-10 22:15:00
redos
redos
ROS-20240404-10
2024-04-04 00:00:00
ROS-20240403-12
2024-04-03 00:00:00
cvelist
cvelist
CVE-2023-27530
2023-03-10 00:00:00
hackerone
hackerone
rubygems
rubygems
Possible Denial of Service Vulnerability in Rack’s header parsing
2023-03-12 21:00:00
Possible DoS Vulnerability in Multipart MIME parsing
2023-03-02 21:00:00
ubuntu
ubuntu
Rack vulnerabilities
2024-03-12 00:00:00
ibm
ibm
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
16.7%
Related for ELSA-2023-3082