Lucene search

K
redhatRedHatRHSA-2024:2953
HistoryMay 22, 2024 - 6:35 a.m.

(RHSA-2024:2953) Moderate: pcs security update

2024-05-2206:35:11
access.redhat.com
9
moderate
pcs
security update
command-line
configuration system
pacemaker
corosync
dos vulnerabilities
rubygem-rack
cve page.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

  • rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)

  • rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)

  • rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.