Skip to content
OpenAdvisories
Unscored RHSA-2015:2290 1 CVE

Red Hat Security Advisory: pcs security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server pcs 0:0.9.143-15.el7
Red Hat · RHEL 7 enterprise_linux:7::server pcs-debuginfo 0:0.9.143-15.el7

Vulnerabilities 1

  • Medium —
    CVE-2015-3225

    Rack vulnerable to Denial of Service via large parameter depth request

    lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.

    rack ruby-rack Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/High_Availability_Add-On_Reference/
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.2_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1121791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1134426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1148863
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1158491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1158537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1158571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163682
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1165803
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166160
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1170205
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1175400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1176687
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1182119
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1182793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1182986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185096
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1186692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1187320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1187571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1188571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1189857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1196412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1197758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1198222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1198265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1198274
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1198640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1199073
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202457
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1204880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1205653
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1206214
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1206219
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1207805