Description
It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | pcs | Affects pcs v0.11.4-6.el9, Fixed in pcs v0.11.4-7.el9_2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | pcs +1 | 0.11.4-7.el9_2 | RHSA-2023:2652 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | pcs +1 | 0.11.4-7.el9_2 | ALSA-2023:2652 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | pcs | 0.11.4-7.el9_2 | RLSA-2023:2652 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | pcs +1 | 0.11.4-7.el9_2 | ELSA-2023-12595 |
Advisories 4
- ALSA-2023:2652 Important: pcs security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:2652 Red Hat Security Advisory: pcs security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RLSA-2023:2652 Important: pcs security and bug fix update Rocky Linux Security Advisories · Feb 5, 2026
- ELSA-2023-12595 Important: pcs security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 20, 2023