(RHSA-2024:2113) Moderate: pcs security update

2024-04-3006:14:46

access.redhat.com

rhsa-2024-2113

moderate

pcs packages

security fix

rubygem-rack

denial of service vulnerability

cve-2024-25126

range header

cve-2024-26141

header parsing

cve-2024-26146

cvss score

red hat enterprise linux 9.4 release notes

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

AI Score

5.3

Confidence

High

EPSS

Percentile

10.3%

JSON

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64pcs-snmp< 0.11.7-2.el9_4pcs-snmp-0.11.7-2.el9_4.aarch64.rpm
RedHat9aarch64pcs< 0.11.7-2.el9_4pcs-0.11.7-2.el9_4.aarch64.rpm
RedHat9x86_64pcs< 0.11.7-2.el9_4pcs-0.11.7-2.el9_4.x86_64.rpm
RedHat9ppc64lepcs-snmp< 0.11.7-2.el9_4pcs-snmp-0.11.7-2.el9_4.ppc64le.rpm
RedHat9s390xpcs< 0.11.7-2.el9_4pcs-0.11.7-2.el9_4.s390x.rpm
RedHat9ppc64lepcs< 0.11.7-2.el9_4pcs-0.11.7-2.el9_4.ppc64le.rpm
RedHat9x86_64pcs-snmp< 0.11.7-2.el9_4pcs-snmp-0.11.7-2.el9_4.x86_64.rpm
RedHat9s390xpcs-snmp< 0.11.7-2.el9_4pcs-snmp-0.11.7-2.el9_4.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	aarch64	pcs-snmp	< 0.11.7-2.el9_4	pcs-snmp-0.11.7-2.el9_4.aarch64.rpm
RedHat	9	aarch64	pcs	< 0.11.7-2.el9_4	pcs-0.11.7-2.el9_4.aarch64.rpm
RedHat	9	x86_64	pcs	< 0.11.7-2.el9_4	pcs-0.11.7-2.el9_4.x86_64.rpm
RedHat	9	ppc64le	pcs-snmp	< 0.11.7-2.el9_4	pcs-snmp-0.11.7-2.el9_4.ppc64le.rpm
RedHat	9	s390x	pcs	< 0.11.7-2.el9_4	pcs-0.11.7-2.el9_4.s390x.rpm
RedHat	9	ppc64le	pcs	< 0.11.7-2.el9_4	pcs-0.11.7-2.el9_4.ppc64le.rpm
RedHat	9	x86_64	pcs-snmp	< 0.11.7-2.el9_4	pcs-snmp-0.11.7-2.el9_4.x86_64.rpm
RedHat	9	s390x	pcs-snmp	< 0.11.7-2.el9_4	pcs-snmp-0.11.7-2.el9_4.s390x.rpm