Skip to content
OpenAdvisories
Medium ELSA-2025-7085 1 CVE

Moderate: pcs security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Summary

[0.11.9-2]
- Fixed restarting bundles
Resolves: RHEL-79055
- Fixed deletion of misconfigured bundles
Resolves: RHEL-79160
- Fixed filtering of resource clones in web console
Resolves: RHEL-78653
- Updated bundled rubygem rack
Resolves: RHEL-79500

[0.11.9-1]
- Rebased pcs to the latest sources (see CHANGELOG.md)
Resolves: RHEL-44420
- Updated pcs-web-ui to 0.1.22

[0.11.8-2]
- Rebased pcs to the latest sources (see CHANGELOG.md)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 pcs 0:0.11.9-2.el9
Oracle Linux · 9 pcs-snmp 0:0.11.9-2.el9

Vulnerabilities 1

  • Medium 5.7

    Possible Log Injection in Rack::CommonLogger

    Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept d…