[ALSA-2024:2953] Moderate: pcs security update
Type:
security
Severity:
moderate
Release date:
2024-05-29
Description:
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126) * rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141) * rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 pcs-snmp-0.10.18-2.el8_10.aarch64.rpm 0e543b51a7ad18d8530fd741e5044e7de1cb515dfbc9faa94607df647a801281
aarch64 pcs-0.10.18-2.el8_10.aarch64.rpm ae3f9e10f298a050bbf36629d25a817218ff80b898d162f3f3b3fc37c3881566
ppc64le pcs-0.10.18-2.el8_10.ppc64le.rpm 2a909364caf1e35b97bc66979f74b765a84cb1941a5b4f17ff3458b449ebb34c
ppc64le pcs-snmp-0.10.18-2.el8_10.ppc64le.rpm 2ced31295290b0cb16128b927be6e188a5b411f6e992f54953b8489972953c02
s390x pcs-snmp-0.10.18-2.el8_10.s390x.rpm 49d0f258ce79a8f41f8b895d3905bc9cfb0efa6a5a13c60fc56e07145aa6ae9a
s390x pcs-0.10.18-2.el8_10.s390x.rpm 5d48b97db0c498a642db246606dce5a6741e138f69e9b4ee1f3875763b5a53c5
x86_64 pcs-0.10.18-2.el8_10.x86_64.rpm b33ddd255eb97f60b8b1e0c6329287e06241fe3d385a24b445af0c21fb43e760
x86_64 pcs-snmp-0.10.18-2.el8_10.x86_64.rpm dcbd09ff688f0a9fc8bff7e376e0c24591b8499cb83f7fe15ecba5f90c6b28f0
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.