(RHSA-2024:2581) Moderate: pcs security update

2024-04-3014:00:44

access.redhat.com

pcs security update

pacemaker

corosync utilities

denial of service vulnerabilities

rubygem-rack

cve-2024-25126

cve-2024-26141

cve-2024-26146

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lepcs-snmp< 0.10.15-4.el8_8.2pcs-snmp-0.10.15-4.el8_8.2.ppc64le.rpm
RedHat8s390xpcs-snmp< 0.10.15-4.el8_8.2pcs-snmp-0.10.15-4.el8_8.2.s390x.rpm
RedHat8x86_64pcs< 0.10.15-4.el8_8.2pcs-0.10.15-4.el8_8.2.x86_64.rpm
RedHat8s390xpcs< 0.10.15-4.el8_8.2pcs-0.10.15-4.el8_8.2.s390x.rpm
RedHat8x86_64pcs-snmp< 0.10.15-4.el8_8.2pcs-snmp-0.10.15-4.el8_8.2.x86_64.rpm
RedHat8aarch64pcs< 0.10.15-4.el8_8.2pcs-0.10.15-4.el8_8.2.aarch64.rpm
RedHat8aarch64pcs-snmp< 0.10.15-4.el8_8.2pcs-snmp-0.10.15-4.el8_8.2.aarch64.rpm
RedHat8ppc64lepcs< 0.10.15-4.el8_8.2pcs-0.10.15-4.el8_8.2.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	pcs-snmp	< 0.10.15-4.el8_8.2	pcs-snmp-0.10.15-4.el8_8.2.ppc64le.rpm
RedHat	8	s390x	pcs-snmp	< 0.10.15-4.el8_8.2	pcs-snmp-0.10.15-4.el8_8.2.s390x.rpm
RedHat	8	x86_64	pcs	< 0.10.15-4.el8_8.2	pcs-0.10.15-4.el8_8.2.x86_64.rpm
RedHat	8	s390x	pcs	< 0.10.15-4.el8_8.2	pcs-0.10.15-4.el8_8.2.s390x.rpm
RedHat	8	x86_64	pcs-snmp	< 0.10.15-4.el8_8.2	pcs-snmp-0.10.15-4.el8_8.2.x86_64.rpm
RedHat	8	aarch64	pcs	< 0.10.15-4.el8_8.2	pcs-0.10.15-4.el8_8.2.aarch64.rpm
RedHat	8	aarch64	pcs-snmp	< 0.10.15-4.el8_8.2	pcs-snmp-0.10.15-4.el8_8.2.aarch64.rpm
RedHat	8	ppc64le	pcs	< 0.10.15-4.el8_8.2	pcs-0.10.15-4.el8_8.2.ppc64le.rpm