Skip to content
OpenAdvisories
High RLSA-2025:8256 1 CVE

Important: pcs security update

Published Oct 4, 2025 · Updated Oct 7, 2025

Ecosystem: Rocky Linux

Summary

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

* rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 pcs 0:0.11.9-2.el9_6.1

Vulnerabilities 1

  • High 7.5
    CVE-2025-46727

    Unbounded-Parameter DoS in Rack::QueryParser

    Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters…

    rack rack rack ruby-rack Debian Ubuntu Wolfi RubyGems

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2364966