Lucene search
RedHatRHSA-2023:3082HistoryMay 16, 2023 - 9:15 a.m.
(RHSA-2023:3082) Moderate: pcs security and bug fix update
2023-05-1609:15:08
access.redhat.com
9
rhsa-2023-3082
moderate
pcs packages
pacemaker
corosync
security fix
cve-2023-27530
cve-2023-27539
denial of service
bug fix
bz#2180700
bz#2180706
scsi fencing device
configuration differences.
0.001 Low
EPSS
Percentile
36.5%
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
-
rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)
-
rubygem-rack: denial of service in header parsing (CVE-2023-27539)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
Command ‘pcs config checkpoint diff’ does not show configuration differences between checkpoints (BZ#2180700)
-
Need a way to add a scsi fencing device to a cluster without requiring a restart of all cluster resources (BZ#2180706)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | ppc64le | pcs | < 0.10.15-4.el8_8.1 | pcs-0.10.15-4.el8_8.1.ppc64le.rpm |
| RedHat | 8 | aarch64 | pcs | < 0.10.15-4.el8_8.1 | pcs-0.10.15-4.el8_8.1.aarch64.rpm |
| RedHat | 8 | s390x | pcs | < 0.10.15-4.el8_8.1 | pcs-0.10.15-4.el8_8.1.s390x.rpm |
| RedHat | 8 | ppc64le | pcs-snmp | < 0.10.15-4.el8_8.1 | pcs-snmp-0.10.15-4.el8_8.1.ppc64le.rpm |
| RedHat | 8 | x86_64 | pcs | < 0.10.15-4.el8_8.1 | pcs-0.10.15-4.el8_8.1.x86_64.rpm |
| RedHat | 8 | s390x | pcs-snmp | < 0.10.15-4.el8_8.1 | pcs-snmp-0.10.15-4.el8_8.1.s390x.rpm |
| RedHat | 8 | x86_64 | pcs-snmp | < 0.10.15-4.el8_8.1 | pcs-snmp-0.10.15-4.el8_8.1.x86_64.rpm |
| RedHat | 8 | aarch64 | pcs-snmp | < 0.10.15-4.el8_8.1 | pcs-snmp-0.10.15-4.el8_8.1.aarch64.rpm |
Related
nessus
nessus
RHEL 8 : pcs (RHSA-2023:3403)
2023-05-31 00:00:00
RHEL 8 : pcs (RHSA-2023:1961)
2023-04-25 00:00:00
Oracle Linux 8 : pcs (ELSA-2023-3082)
2023-05-29 00:00:00
osv
osv
Moderate: pcs security and bug fix update
2023-05-18 19:18:23
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
Important: pcs security and bug fix update
2023-05-25 19:53:02
almalinux
almalinux
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
Important: pcs security and bug fix update
2023-05-09 00:00:00
redhat
redhat
(RHSA-2023:3403) Moderate: pcs security and bug fix update
2023-05-31 15:30:50
(RHSA-2023:1981) Moderate: pcs security and bug fix update
2023-04-25 09:58:19
(RHSA-2023:1961) Moderate: pcs security and bug fix update
2023-04-25 08:12:36
openvas
openvas
Debian: Security Advisory (DLA-3392-1)
2023-04-19 00:00:00
Mageia: Security Advisory (MGASA-2024-0042)
2024-02-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2294-1)
2023-05-29 00:00:00
oraclelinux
oraclelinux
pcs security update
2023-05-29 00:00:00
pcs security update
2023-07-20 00:00:00
rocky
rocky
pcs security and bug fix update
2023-05-18 19:18:23
pcs security and bug fix update
2023-05-25 19:53:02
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-03-17 02:16:44
Denial Of Service (DoS)
2023-03-09 01:51:42
freebsd
freebsd
rack -- possible denial of service vulnerability in header parsing
2023-03-13 00:00:00
rack -- possible DoS vulnerability in multipart MIME parsing
2023-03-03 00:00:00
amazon
amazon
Medium: pcs
2023-04-27 18:36:00
github
github
Rack has possible DoS Vulnerability in Multipart MIME parsing
2023-03-08 17:20:04
Possible Denial of Service Vulnerability in Rack's header parsing
2023-03-15 21:36:02
cve
cve
CVE-2023-27530
2023-03-10 22:15:10
CVE-2023-27539
2023-03-15 02:20:20
ubuntucve
ubuntucve
CVE-2023-27530
2023-03-10 00:00:00
CVE-2023-27539
2023-03-22 00:00:00
prion
prion
Code injection
2023-03-10 22:15:00
redos
redos
ROS-20240404-10
2024-04-04 00:00:00
ROS-20240403-12
2024-04-03 00:00:00
cvelist
cvelist
CVE-2023-27530
2023-03-10 00:00:00
debiancve
debiancve
CVE-2023-27539
2023-03-15 02:20:20
CVE-2023-27530
2023-03-10 22:15:10
redhatcve
redhatcve
CVE-2023-27539
2023-03-19 15:39:04
CVE-2023-27530
2023-03-09 00:14:22
hackerone
hackerone
mageia
mageia
Updated ruby-rack fixes a vulnerability and some bugs
2024-02-19 20:35:05
Updated ruby-rack packages fix security vulnerability
2023-03-24 08:55:49
rubygems
rubygems
Possible DoS Vulnerability in Multipart MIME parsing
2023-03-02 21:00:00
Possible Denial of Service Vulnerability in Rack’s header parsing
2023-03-12 21:00:00
ibm
ibm