Release date:
2026-09-28 16:01:31 UTC
Description:
- CVE-2022-1049: fix pcsd PAM auth accepting expired accounts and passwords
- CVE-2022-38900: fix DoS in decode() of bundled decode-uri-component
- CVE-2022-45442: fix reflected file download in bundled sinatra attachment()
- CVE-2023-27530: fix multipart part count DoS in rack (via rack 2.2.20)
- CVE-2023-27539: fix ReDoS in rack header parsing (via rack 2.2.20)
- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado
- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado
Updated packages:
-
pcs-0.10.8-1.el8.tuxcare.els2.x86_64.rpm
sha:a67dec32ac45e4db9383c76dc2d29eedac0ccc40d0bebfa56bcbae7064562309
-
pcs-snmp-0.10.8-1.el8.tuxcare.els2.x86_64.rpm
sha:c288ad1f52ea6bd812c407006fe07ef0e5719764695c9f721019dc8d3cc8f5a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
