Skip to content
OpenAdvisories
Low ELSA-2024-5338 1 CVE

Low: pcs security update (Oracle Linux 8)

Published Aug 16, 2024 · Updated Aug 16, 2024

Ecosystem: Oracle Linux

Summary

[0.10.18-2.0.1]
- Replace HAM-logo.png with a generic one

[0.10.18-2]
- Updated rubygem rexml
Resolves: RHEL-37883

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 pcs 0:0.10.18-2.0.1.el8_10.1
Oracle Linux · 8 pcs-snmp 0:0.10.18-2.0.1.el8_10.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-35176 Public exploit

    REXML contains a denial of service vulnerability

    REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.…

    ruby rexml kube-fluentd-operator ruby2.3 Debian Ubuntu Azure Linux Wolfi RubyGems