Lucene search
RedHatRHSA-2024:1846HistoryApr 16, 2024 - 3:03 p.m.
(RHSA-2024:1846) Moderate: pcs security update
2024-04-1615:03:20
access.redhat.com
10
pcs
pacemaker
corosync
denial of service
vulnerabilities
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
-
rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
-
rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
-
rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | s390x | pcs | < 0.11.4-7.el9_2.1 | pcs-0.11.4-7.el9_2.1.s390x.rpm |
| RedHat | 9 | x86_64 | pcs-snmp | < 0.11.4-7.el9_2.1 | pcs-snmp-0.11.4-7.el9_2.1.x86_64.rpm |
| RedHat | 9 | x86_64 | pcs | < 0.11.4-7.el9_2.1 | pcs-0.11.4-7.el9_2.1.x86_64.rpm |
| RedHat | 9 | aarch64 | pcs-snmp | < 0.11.4-7.el9_2.1 | pcs-snmp-0.11.4-7.el9_2.1.aarch64.rpm |
| RedHat | 9 | s390x | pcs-snmp | < 0.11.4-7.el9_2.1 | pcs-snmp-0.11.4-7.el9_2.1.s390x.rpm |
| RedHat | 9 | ppc64le | pcs-snmp | < 0.11.4-7.el9_2.1 | pcs-snmp-0.11.4-7.el9_2.1.ppc64le.rpm |
| RedHat | 9 | aarch64 | pcs | < 0.11.4-7.el9_2.1 | pcs-0.11.4-7.el9_2.1.aarch64.rpm |
| RedHat | 9 | ppc64le | pcs | < 0.11.4-7.el9_2.1 | pcs-0.11.4-7.el9_2.1.ppc64le.rpm |
Related
osv
osv
ruby-rack - security update
2024-04-29 00:00:00
Moderate: pcs security update
2024-04-30 00:00:00
Moderate: pcs security update
2024-05-22 00:00:00
nessus
nessus
Debian dla-3800 : ruby-rack - security update
2024-04-29 00:00:00
Oracle Linux 9 : pcs (ELSA-2024-2113)
2024-05-06 00:00:00
RHEL 8 : pcs (RHSA-2024:2953)
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:2007) Moderate: pcs security update
2024-04-23 16:20:34
(RHSA-2024:2113) Moderate: pcs security update
2024-04-30 06:14:46
(RHSA-2024:2581) Moderate: pcs security update
2024-04-30 14:00:44
openvas
openvas
Debian: Security Advisory (DLA-3800-1)
2024-04-30 00:00:00
Debian: Security Advisory (DSA-5698-1)
2024-05-27 00:00:00
Mageia: Security Advisory (MGASA-2024-0123)
2024-04-15 00:00:00
rocky
rocky
pcs security update
2024-06-14 13:59:33
oraclelinux
oraclelinux
pcs security update
2024-05-23 00:00:00
pcs security update
2024-05-02 00:00:00
debian
debian
[SECURITY] [DSA 5698-1] ruby-rack security update
2024-05-24 16:43:43
[SECURITY] [DLA 3800-1] ruby-rack security update
2024-04-29 09:44:25
almalinux
almalinux
Moderate: pcs security update
2024-05-22 00:00:00
Moderate: pcs security update
2024-04-30 00:00:00
amazon
amazon
Medium: pcs
2024-03-13 20:26:00
redos
redos
ROS-20240508-01
2024-05-08 00:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerabilities
2024-04-12 23:45:19
ubuntu
ubuntu
Rack vulnerabilities
2024-06-17 00:00:00
Rack vulnerabilities
2024-03-12 00:00:00
redhatcve
redhatcve
cvelist
cvelist
CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)
2024-02-28 23:28:07
CVE-2024-26141 Possible DoS Vulnerability with Range Header in Rack
2024-02-28 23:28:10
cve
cve
debiancve
debiancve
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2024-02-28 08:16:50
Denial Of Service
2024-02-29 05:37:12
Denial Of Service (DoS)
2024-02-29 06:31:11
github
github
Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)
2024-02-28 22:57:26
Rack Header Parsing leads to Possible Denial of Service Vulnerability
2024-02-28 22:57:03
Rack has possible DoS Vulnerability with Range Header
2024-02-28 22:57:12
cgr
cgr
CVE-2024-25126 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26146 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26141 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-25126 vulnerabilities
2024-07-03 09:08:38
CVE-2024-26146 vulnerabilities
2024-07-03 09:08:38
CVE-2024-26141 vulnerabilities
2024-07-03 09:08:38
nvd
nvd
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2024-02-29 00:15:00
Design/Logic Flaw
2024-02-29 00:15:00
Design/Logic Flaw
2024-02-29 00:15:00
ibm
ibm
hackerone
hackerone
rubygems
rubygems
Possible Denial of Service Vulnerability in Rack Header Parsing
2024-02-20 21:00:00
Denial of Service Vulnerability in Rack Content-Type Parsing
2024-02-20 21:00:00
Possible DoS Vulnerability with Range Header in Rack
2024-02-20 21:00:00