Skip to content
OpenAdvisories
Medium RHSA-2024:5338 1 CVE

Red Hat Security Advisory: pcs security update

Published Sep 28, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::highavailability pcs 0:0.10.18-2.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::highavailability pcs-snmp 0:0.10.18-2.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage pcs 0:0.10.18-2.el8_10.1
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage pcs-snmp 0:0.10.18-2.el8_10.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-35176 Public exploit

    REXML contains a denial of service vulnerability

    REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.…

    ruby rexml kube-fluentd-operator ruby2.3 Debian Ubuntu Azure Linux Wolfi RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2280894
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5338.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-35176
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-35176
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-35176
  • article
    https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
  • article
    https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176