Release date:
2026-10-16 16:26:53 UTC
Description:
- CVE-2026-31958: cap multipart part count and part header size in bundled tornado, and stop accepting multipart requests in pcsd
- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado
- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado
Updated packages:
-
pcs-0.11.4-7.el9_2.tuxcare.els5.aarch64.rpm
sha:6d0f81ff5742ed37b161e19bbefccf051f095729efec6d45f1c93e025c5e87ea
-
pcs-0.11.4-7.el9_2.tuxcare.els5.i686.rpm
sha:263a2d9ee4fb9b438e929bf13c45688c35a9360a30acade0bce20698c92ef414
-
pcs-0.11.4-7.el9_2.tuxcare.els5.x86_64.rpm
sha:b200aab76456894d65be917b5db1ca5349bfafc2bf165f77c563aa32043d4260
-
pcs-snmp-0.11.4-7.el9_2.tuxcare.els5.aarch64.rpm
sha:9d5efacd1f0b9f985b22ec220f7a8d85f3b717aeac1a8b9c5de97260612b1b9b
-
pcs-snmp-0.11.4-7.el9_2.tuxcare.els5.i686.rpm
sha:ab86e5da905ffe229fdbe8017638766448714ac50aab5a74169131c31b055be0
-
pcs-snmp-0.11.4-7.el9_2.tuxcare.els5.x86_64.rpm
sha:77903cd220b52b8fc97854d96a5a18723afb658211a39114ccb560d5778b3ced
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
