Summary
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | pcs | 0.10.18-2.el8_10.9.alma.1 |
| AlmaLinux · 8 | pcs-snmp | 0.10.18-2.el8_10.9.alma.1 |
Vulnerabilities 1
-
High 8.7
Tornado has a DoS due to too many multipart parts
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the …