Summary
[0.10.18-2.0.1.el8_10.9]
- Replaced HAM-logo
[0.10.18]
- Debrand PCS
[0.10.18-2.el8_10.9]
- Fixed CVE-2026-31958 by patching bundled Tornado
Resolves: RHEL-155293
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pcs | 0:0.10.18-2.0.1.el8_10.9 |
| Oracle Linux · 8 | pcs-snmp | 0:0.10.18-2.0.1.el8_10.9 |
Vulnerabilities 1
-
High 8.7
Tornado has a DoS due to too many multipart parts
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the …