Skip to content
OpenAdvisories
High ELSA-2023-12235 1 CVE

Important: pcs security update (Oracle Linux 9)

Published Apr 5, 2023 · Updated Apr 5, 2023

Ecosystem: Oracle Linux

Summary

[0.11.3-4.el9_1.3]
- Fixed a vulnerability in pcs-web-ui-node-modules
- Resolves: rhbz#2179900

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 pcs 0:0.11.3-4.el9_1.3
Oracle Linux · 9 pcs-snmp 0:0.11.3-4.el9_1.3

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-28154

    Cross-realm object access in Webpack 5

    Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.

    node-webpack webpack node-webpack Debian Ubuntu npm