Issued at: 2026-02-13
Updated at: 2026-02-14
Synopsis
Important: pcs security update
Description
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2431740
CVEs
CVE-2025-13465
Affected packages
Rocky Linux 9 ppc64le - ResilientStorage
pcs-0:0.11.10-1.el9_7.2.ppc64le.rpm
pcs-0:0.11.10-1.el9_7.2.src.rpm
pcs-snmp-0:0.11.10-1.el9_7.2.ppc64le.rpm
Rocky Linux 9 s390x - ResilientStorage
pcs-0:0.11.10-1.el9_7.2.s390x.rpm
pcs-0:0.11.10-1.el9_7.2.src.rpm
pcs-snmp-0:0.11.10-1.el9_7.2.s390x.rpm
Rocky Linux 9 x86_64 - ResilientStorage
pcs-0:0.11.10-1.el9_7.2.src.rpm
pcs-0:0.11.10-1.el9_7.2.x86_64.rpm
pcs-snmp-0:0.11.10-1.el9_7.2.x86_64.rpm