Skip to content
OpenAdvisories
High RHSA-2020:2473 1 CVE

Red Hat Security Advisory: pcs security and bug fix update

Published Sep 18, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::highavailability pcs 0:0.10.1-4.el8_0.5
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::highavailability pcs-snmp 0:0.10.1-4.el8_0.5

Vulnerabilities 1

  • High 7.5
    CVE-2020-10663 Public exploit

    Unsafe object creation in json RubyGem

    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within…

    ruby2.3 ruby ruby2.5 json Debian Ubuntu Alpine RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1827500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1840156
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2473.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10663
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10663
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10663
  • article
    https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663