Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::highavailability | pcs | 0:0.11.6-3.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::highavailability | pcs-snmp | 0:0.11.6-3.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::resilientstorage | pcs | 0:0.11.6-3.el9 |
| Red Hat · RHEL 9 enterprise_linux:9::resilientstorage | pcs-snmp | 0:0.11.6-3.el9 |
Vulnerabilities 1
-
High 7.5CVE-2022-38900 EPSS 23%
decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1423473
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1465829
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2160664
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2163440
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2163914
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2163953
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2168155
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2168617
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2170644
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2174735
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2175881
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2177996
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2178714
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2179388
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2182810
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2210855
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2216434
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2217850
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2219407
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2222788
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6316.json
-
report
https://access.redhat.com/security/cve/CVE-2022-38900
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-38900
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-38900
-
article
https://github.com/SamVerschueren/decode-uri-component/issues/5
-
advisory
https://github.com/advisories/GHSA-w573-4hg7-7wgq