Summary
[0.10.18-2.0.1.el8_10.3]
- Replace HAM-logo.png with a generic one
[0.10.18-2.el8_10.3]
- Prevented any future HTTP header-based attacks on puma/sinatra by removing any headers not recognized by pcsd
Resolves: RHEL-65595
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pcs | 0:0.10.18-2.0.1.el8_10.3 |
| Oracle Linux · 8 | pcs-snmp | 0:0.10.18-2.0.1.el8_10.3 |
Vulnerabilities 1
-
Medium 5.4
Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision
Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack …