[CLSA-2026:1792688250] pcs: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-22 16:57:42 UTC
Description:
- Fix CVE-2025-46727: limit number and bytesize of query parameters in bundled rubygem rack - Fix CVE-2025-61919: bound the read of urlencoded request bodies in bundled rubygem rack - Fix CVE-2025-61771: limit multipart data retained in memory in bundled rubygem rack - Fix CVE-2025-61772: limit the multipart part header size in bundled rubygem rack - Skip the pcs tests that need pacemaker >= 1.1.23 when the build root has an older one (CloudLinux 7)
Updated packages:
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els1.i686.rpm
    sha:198f02930f23616c4eed77652a72a290b9e6141f7d53d7507be41fd7f38645a0
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els1.x86_64.rpm
    sha:8c20781079598de4595b47422bdc7371d24f1abd6c442743da89129fb41210ea
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els1.i686.rpm
    sha:867945cf3fcf02ae851972f20863531ea74f21ca553a91d35017372d997c7d8c
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els1.x86_64.rpm
    sha:b1cb1b78435a89d5286807ada6e1efdb65c08084f41dcd21200e07117eadede6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.