pcs-0.11.6-3.el9.ML.1

エラータID: AXSA:2023-6977:13

Release date: 
Wednesday, December 13, 2023 - 09:22
Subject: 
pcs-0.11.6-3.el9.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Low
Description: 

The pcs packages provide a command-line configuration system for the Pacemaker
and Corosync utilities.

Security Fix(es):

* decode-uri-component: improper input validation resulting in DoS
(CVE-2022-38900)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2022-38900
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting
in DoS.

Solution: 

Update packages.

CVEs: 
CVE-2022-38900
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
Additional Info: 

N/A

Download: 

SRPMS
  1. pcs-0.11.6-3.el9.ML.1.src.rpm
    MD5: 793deecc66c6c286c9f9730aa670703f
    SHA-256: b1206f38bbb7a14cfcb9f31c9d13493656ef40dcb7180ef16b2c97da0ee2055c
    Size: 45.31 MB

Asianux Server 9 for x86_64
  1. pcs-0.11.6-3.el9.ML.1.x86_64.rpm
    MD5: f65687295f2d99ebff8e82be866730fd
    SHA-256: 29009a47693e9e92f953d9014918e64fa3b883b8844ee0e872a168ed89787296
    Size: 7.84 MB
  2. pcs-snmp-0.11.6-3.el9.ML.1.x86_64.rpm
    MD5: 6286f54456c820cd199e262224008fbc
    SHA-256: 7bebd1e61737e2c0ddb2016771c6963b6d2b1dc89296adda9697eb3a7119406f
    Size: 63.48 kB