Summary
[0.10.15-4.0.1.el8_8.1]
- Replace HAM-logo.png with a generic one
[0.10.15-4.el8_8.1]
- Fix displaying differences between configuration checkpoints in pcs config checkpoint diff command
- Fix pcs stonith update-scsi-devices command which was broken since Pacemaker-2.1.5-rc1
- Updated bundled rubygem rack
- Resolves: rhbz#2180700 rhbz#2180706 rhbz#2180713 rhbz#2180974
[0.10.15-4]
- Fixed enabling/disabling sbd when cluster is not running
- Added BuildRequires: pam - needed for tier0 tests during build
- Resolves: rhbz#2166243
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pcs | 0:0.10.15-4.0.1.el8_8.1 |
| Oracle Linux · 8 | pcs-snmp | 0:0.10.15-4.0.1.el8_8.1 |
Vulnerabilities 2
-
High 7.5
Rack has possible DoS Vulnerability in Multipart MIME parsing
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.
-
Medium 5.3
Possible Denial of Service Vulnerability in Rack's header parsing
There is a denial of service vulnerability in the header parsing component of Rack.