Skip to content
OpenAdvisories
High RHSA-2020:2462 1 CVE

Red Hat Security Advisory: pcs security and bug fix update

Published Sep 18, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::highavailability pcs 0:0.10.4-6.el8_2.1
Red Hat · RHEL 8 enterprise_linux:8::highavailability pcs-snmp 0:0.10.4-6.el8_2.1
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage pcs 0:0.10.4-6.el8_2.1
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage pcs-snmp 0:0.10.4-6.el8_2.1

Vulnerabilities 1

  • High 7.5
    CVE-2020-10663 Public exploit

    Unsafe object creation in json RubyGem

    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within…

    ruby2.3 ruby ruby2.5 json Debian Ubuntu Alpine RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1827500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1832914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1838084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1840158
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2462.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10663
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10663
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10663
  • article
    https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663