Issued at: 2025-10-04
Updated at: 2025-10-10
Synopsis
Important: pcs security update
Description
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9.6 aarch64
Rocky Linux 9.6 ppc64le
Rocky Linux 9.6 s390x
Rocky Linux 9.6 x86_64
Fixes
2364966
CVEs
CVE-2025-46727
Affected packages
Rocky Linux 9.6 ppc64le - ResilientStorage
pcs-0:0.11.9-2.el9_6.1.ppc64le.rpm
pcs-0:0.11.9-2.el9_6.1.src.rpm
pcs-snmp-0:0.11.9-2.el9_6.1.ppc64le.rpm
Rocky Linux 9.6 s390x - ResilientStorage
pcs-0:0.11.9-2.el9_6.1.s390x.rpm
pcs-0:0.11.9-2.el9_6.1.src.rpm
pcs-snmp-0:0.11.9-2.el9_6.1.s390x.rpm
Rocky Linux 9.6 aarch64 - ResilientStorage
pcs-0:0.11.9-2.el9_6.1.src.rpm
Rocky Linux 9.6 x86_64 - ResilientStorage
pcs-0:0.11.9-2.el9_6.1.src.rpm
pcs-0:0.11.9-2.el9_6.1.x86_64.rpm
pcs-snmp-0:0.11.9-2.el9_6.1.x86_64.rpm