Release date:
2026-09-28 15:56:09 UTC
Description:
- CVE-2022-1049: fix pcsd PAM auth accepting expired accounts and passwords
- CVE-2022-38900: fix DoS in decode() of bundled decode-uri-component
- CVE-2022-45442: fix reflected file download in bundled sinatra attachment()
- CVE-2023-27530: fix multipart part count DoS in rack (via rack 2.2.20)
- CVE-2023-27539: fix ReDoS in rack header parsing (via rack 2.2.20)
- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado
- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado
Updated packages:
-
pcs-0.10.8-1.el8.tuxcare.els2.x86_64.rpm
sha:94c8cc239b5db644a871c854250868f8336028ec0045c183c6c7b1c4c296319d
-
pcs-snmp-0.10.8-1.el8.tuxcare.els2.x86_64.rpm
sha:9f701f7eee1876408863e4fae0d9cbe13a56c583ab8b0c0eee75877bba536e35
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
