[CLSA-2026:1794070599] pcs: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-07 16:56:51 UTC
Description:
- Fix CVE-2025-46727: limit number and bytesize of query parameters in bundled rubygem rack - Fix CVE-2025-61919: bound the read of urlencoded request bodies in bundled rubygem rack - Fix CVE-2025-61771: limit multipart data retained in memory in bundled rubygem rack - Fix CVE-2025-61772: limit the multipart part header size in bundled rubygem rack - Skip the pcs tests that need pacemaker >= 1.1.23 when the build root has an older one (CloudLinux 7)
Updated packages:
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els1.i686.rpm
    sha:2e9a7b950c57c2f4b1590a4c9ada4b2cd3e32093131bd39e517726adc8a88026
  • pcs-0.9.169-3.0.1.el7_9.3.tuxcare.els1.x86_64.rpm
    sha:daeae1a6a393c5cc1fba2ed2f9edf45b76c4d2b08852c522cfd78d24b366869e
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els1.i686.rpm
    sha:a23287445dbd944e6c4670802836946d65224eb6e2608b832d4b8564504eb33b
  • pcs-snmp-0.9.169-3.0.1.el7_9.3.tuxcare.els1.x86_64.rpm
    sha:dcdb98cc3f9b4a8d2f90e6505398e06a624cf8086e7a472656d0166419785a01
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.