Lucene search

K
oraclelinuxOracleLinuxELSA-2023-6316
HistoryNov 12, 2023 - 12:00 a.m.

pcs

2023-11-1200:00:00
linux.oracle.com
5
enhanced security
regression fix
constraint export
upstream source rebase

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

60.5%

[0.11.6-3]

  • Refreshing any page in pcs-web-ui no longer causes it to display a blank page
  • Resolves: rhbz#2222788
    [0.11.6-2]
  • Added BuildRequires: debugedit - for generating MiniDebugInfo - triggered by removing find-debuginfo.sh from rpm
  • Make use of filters when extracting tarballs to enhance security if provided by Python (pcs config restore command)
  • Exporting constraints with rules in form of pcs commands now escapes # and fixes spaces in dates to make the commands valid
  • Constraints containing options unsupported by pcs are not exported and a warning is printed instead
  • Using spaces in dates in location constraint rules is deprecated
  • Resolves: rhbz#2163953 rhbz#2216434 rhbz#2217850 rhbz#2219407
    [0.11.6-1]
  • Rebased to the latest upstream sources (see CHANGELOG.md)
  • Updated bundled rubygems: puma, tilt
  • Resolves: rhbz#1465829 rhbz#2163440 rhbz#2168155
    [0.11.5-2]
  • Fixed a regression causing crash in pcs resource move command (broken since pcs-0.11.5)
  • Resolves: rhbz#2210855
    [0.11.5-1]
  • Rebased to the latest upstream sources (see CHANGELOG.md)
  • Updated pcs-web-ui
  • Updated bundled dependencies: tornado, dacite
  • Added bundled rubygems: nio4r, puma
  • Removed bundled rubygems: daemons, eventmachine, thin, webrick
  • Updated bundled rubygems: backports, rack, rack-protection, rack-test, sinatra, tilt
  • Added dependency nss-tools - for working with qdevice certificates
  • Resolves: rhbz#1423473 rhbz#1860626 rhbz#2160664 rhbz#2163440 rhbz#2163914 rhbz#2163953 rhbz#2168155 rhbz#2168617 rhbz#2174735 rhbz#2174829 rhbz#2175881 rhbz#2177996 rhbz#2178701 rhbz#2178714 rhbz#2179902 rhbz#2180379 rhbz#2182810

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

60.5%