Lucene search
RedHatRHSA-2024:3431HistoryMay 28, 2024 - 1:22 p.m.
(RHSA-2024:3431) Moderate: pcs security update
2024-05-2813:22:23
access.redhat.com
4
pcs security update
pacemaker
corosync
denial of service
vulnerability
rubygem-rack
cve-2024-25126
cve-2024-26141
cve-2024-26146
cvss score
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
-
rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
-
rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
-
rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | ppc64le | pcs | < 0.10.12-6.el8_6.5 | pcs-0.10.12-6.el8_6.5.ppc64le.rpm |
| RedHat | 8 | x86_64 | pcs-snmp | < 0.10.12-6.el8_6.5 | pcs-snmp-0.10.12-6.el8_6.5.x86_64.rpm |
| RedHat | 8 | s390x | pcs-snmp | < 0.10.12-6.el8_6.5 | pcs-snmp-0.10.12-6.el8_6.5.s390x.rpm |
| RedHat | 8 | s390x | pcs | < 0.10.12-6.el8_6.5 | pcs-0.10.12-6.el8_6.5.s390x.rpm |
| RedHat | 8 | aarch64 | pcs | < 0.10.12-6.el8_6.5 | pcs-0.10.12-6.el8_6.5.aarch64.rpm |
| RedHat | 8 | x86_64 | pcs | < 0.10.12-6.el8_6.5 | pcs-0.10.12-6.el8_6.5.x86_64.rpm |
| RedHat | 8 | ppc64le | pcs-snmp | < 0.10.12-6.el8_6.5 | pcs-snmp-0.10.12-6.el8_6.5.ppc64le.rpm |
| RedHat | 8 | aarch64 | pcs-snmp | < 0.10.12-6.el8_6.5 | pcs-snmp-0.10.12-6.el8_6.5.aarch64.rpm |
Related
osv
osv
ruby-rack - security update
2024-04-29 00:00:00
ruby-rack - security update
2024-05-24 00:00:00
Moderate: pcs security update
2024-05-22 00:00:00
nessus
nessus
Debian dla-3800 : ruby-rack - security update
2024-04-29 00:00:00
Oracle Linux 9 : pcs (ELSA-2024-2113)
2024-05-06 00:00:00
RHEL 8 : pcs (RHSA-2024:2953)
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:2007) Moderate: pcs security update
2024-04-23 16:20:34
(RHSA-2024:2953) Moderate: pcs security update
2024-05-22 06:35:11
(RHSA-2024:2581) Moderate: pcs security update
2024-04-30 14:00:44
debian
debian
[SECURITY] [DSA 5698-1] ruby-rack security update
2024-05-24 16:43:43
[SECURITY] [DLA 3800-1] ruby-rack security update
2024-04-29 09:44:25
openvas
openvas
Debian: Security Advisory (DSA-5698-1)
2024-05-27 00:00:00
Debian: Security Advisory (DLA-3800-1)
2024-04-30 00:00:00
Mageia: Security Advisory (MGASA-2024-0123)
2024-04-15 00:00:00
oraclelinux
oraclelinux
pcs security update
2024-05-02 00:00:00
pcs security update
2024-05-23 00:00:00
rocky
rocky
pcs security update
2024-06-14 13:59:33
amazon
amazon
Medium: pcs
2024-03-13 20:26:00
almalinux
almalinux
Moderate: pcs security update
2024-05-22 00:00:00
Moderate: pcs security update
2024-04-30 00:00:00
redos
redos
ROS-20240508-01
2024-05-08 00:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerabilities
2024-04-12 23:45:19
ubuntu
ubuntu
Rack vulnerabilities
2024-06-17 00:00:00
Rack vulnerabilities
2024-03-12 00:00:00
redhatcve
redhatcve
debiancve
debiancve
cvelist
cvelist
CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)
2024-02-28 23:28:07
CVE-2024-26141 Possible DoS Vulnerability with Range Header in Rack
2024-02-28 23:28:10
cve
cve
cgr
cgr
CVE-2024-25126 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26146 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26141 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-25126 vulnerabilities
2024-06-26 09:08:30
CVE-2024-26146 vulnerabilities
2024-06-26 09:08:30
CVE-2024-26141 vulnerabilities
2024-06-26 09:08:30
nvd
nvd
veracode
veracode
Denial Of Service
2024-02-29 05:37:12
Regular Expression Denial Of Service (ReDoS)
2024-02-28 08:16:50
Denial Of Service (DoS)
2024-02-29 06:31:11
github
github
Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)
2024-02-28 22:57:26
Rack Header Parsing leads to Possible Denial of Service Vulnerability
2024-02-28 22:57:03
Rack has possible DoS Vulnerability with Range Header
2024-02-28 22:57:12
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2024-02-29 00:15:00
Design/Logic Flaw
2024-02-29 00:15:00
Design/Logic Flaw
2024-02-29 00:15:00
ibm
ibm
hackerone
hackerone
rubygems
rubygems
Possible Denial of Service Vulnerability in Rack Header Parsing
2024-02-20 21:00:00
Denial of Service Vulnerability in Rack Content-Type Parsing
2024-02-20 21:00:00
Possible DoS Vulnerability with Range Header in Rack
2024-02-20 21:00:00