access.redhat.com

Synopsis

Low: pcs security update

Type/Severity

Security Advisory: Low

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for pcs is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

  • REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

  • Red Hat Enterprise Linux High Availability for x86_64 8 x86_64
  • Red Hat Enterprise Linux High Availability for ARM 64 8 aarch64
  • Red Hat Enterprise Linux Resilient Storage for x86_64 8 x86_64
  • Red Hat Enterprise Linux Resilient Storage for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux High Availability for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux Resilient Storage for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux High Availability for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle 8.10 s390x
  • Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle 8.10 s390x
  • Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 8.10 x86_64

Fixes

  • BZ - 2280894 - CVE-2024-35176 REXML: DoS parsing an XML with many `<`s in an attribute value

Red Hat Enterprise Linux High Availability for x86_64 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
x86_64
pcs-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 48fe48604981e79bb5f7483c6518963f90fe5dc09cea6da39311f421c83d1aa5
pcs-snmp-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 596466d7a39257426fa0670d5c148bfc10337d41d3c3ef9a3c8b837ab567c286

Red Hat Enterprise Linux High Availability for ARM 64 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
aarch64
pcs-0.10.18-2.el8_10.1.aarch64.rpm SHA-256: b049330856326099c8b9edaaf8bd40e6010e74815d75c61bf1b91fb0f602b9f8
pcs-snmp-0.10.18-2.el8_10.1.aarch64.rpm SHA-256: c61a350ca7894da641567f459a163c3baad315aad5bd3046e04a699a7b48224f

Red Hat Enterprise Linux Resilient Storage for x86_64 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
x86_64
pcs-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 48fe48604981e79bb5f7483c6518963f90fe5dc09cea6da39311f421c83d1aa5
pcs-snmp-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 596466d7a39257426fa0670d5c148bfc10337d41d3c3ef9a3c8b837ab567c286

Red Hat Enterprise Linux Resilient Storage for IBM z Systems 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
s390x
pcs-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 3a106020d6b9b56430bdc5612f6ab3f2330d9e1d83a5adf46c642364963c22bc
pcs-snmp-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 041bf4eec365f4f925bdd5e75f3502b9a3a20f79a470100526290dd9b36f979f

Red Hat Enterprise Linux High Availability for IBM z Systems 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
s390x
pcs-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 3a106020d6b9b56430bdc5612f6ab3f2330d9e1d83a5adf46c642364963c22bc
pcs-snmp-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 041bf4eec365f4f925bdd5e75f3502b9a3a20f79a470100526290dd9b36f979f

Red Hat Enterprise Linux Resilient Storage for Power, little endian 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
ppc64le
pcs-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: 1716014572542031c3c853aca86f656b50d48ceb26d0fd1deb6f219f60476595
pcs-snmp-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: ce4d928a4e7c1215fc1afcbd993ebe351465ac49ed4e251a5ac887fdf44607df

Red Hat Enterprise Linux High Availability for Power, little endian 8

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
ppc64le
pcs-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: 1716014572542031c3c853aca86f656b50d48ceb26d0fd1deb6f219f60476595
pcs-snmp-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: ce4d928a4e7c1215fc1afcbd993ebe351465ac49ed4e251a5ac887fdf44607df

Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
aarch64
pcs-0.10.18-2.el8_10.1.aarch64.rpm SHA-256: b049330856326099c8b9edaaf8bd40e6010e74815d75c61bf1b91fb0f602b9f8
pcs-snmp-0.10.18-2.el8_10.1.aarch64.rpm SHA-256: c61a350ca7894da641567f459a163c3baad315aad5bd3046e04a699a7b48224f

Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
ppc64le
pcs-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: 1716014572542031c3c853aca86f656b50d48ceb26d0fd1deb6f219f60476595
pcs-snmp-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: ce4d928a4e7c1215fc1afcbd993ebe351465ac49ed4e251a5ac887fdf44607df

Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
s390x
pcs-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 3a106020d6b9b56430bdc5612f6ab3f2330d9e1d83a5adf46c642364963c22bc
pcs-snmp-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 041bf4eec365f4f925bdd5e75f3502b9a3a20f79a470100526290dd9b36f979f

Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
x86_64
pcs-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 48fe48604981e79bb5f7483c6518963f90fe5dc09cea6da39311f421c83d1aa5
pcs-snmp-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 596466d7a39257426fa0670d5c148bfc10337d41d3c3ef9a3c8b837ab567c286

Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
ppc64le
pcs-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: 1716014572542031c3c853aca86f656b50d48ceb26d0fd1deb6f219f60476595
pcs-snmp-0.10.18-2.el8_10.1.ppc64le.rpm SHA-256: ce4d928a4e7c1215fc1afcbd993ebe351465ac49ed4e251a5ac887fdf44607df

Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
s390x
pcs-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 3a106020d6b9b56430bdc5612f6ab3f2330d9e1d83a5adf46c642364963c22bc
pcs-snmp-0.10.18-2.el8_10.1.s390x.rpm SHA-256: 041bf4eec365f4f925bdd5e75f3502b9a3a20f79a470100526290dd9b36f979f

Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 8.10

SRPM
pcs-0.10.18-2.el8_10.1.src.rpm SHA-256: 7cef829ee572c4b99d39f5dc586f2099af76984e0cd7c5fbf453d64d356b1887
x86_64
pcs-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 48fe48604981e79bb5f7483c6518963f90fe5dc09cea6da39311f421c83d1aa5
pcs-snmp-0.10.18-2.el8_10.1.x86_64.rpm SHA-256: 596466d7a39257426fa0670d5c148bfc10337d41d3c3ef9a3c8b837ab567c286

Read the original on access.redhat.com ↗