Issued at: 2026-04-16
Updated at: 2026-04-17
Synopsis
Moderate: pcs security update
Description
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
2446765
CVEs
CVE-2026-31958
Affected packages
Rocky Linux 8 aarch64 - ResilientStorage
pcs-0:0.10.18-2.el8_10.9.aarch64.rpm
pcs-0:0.10.18-2.el8_10.9.src.rpm
pcs-snmp-0:0.10.18-2.el8_10.9.aarch64.rpm
Rocky Linux 8 aarch64 - HighAvailability
pcs-0:0.10.18-2.el8_10.9.aarch64.rpm
pcs-0:0.10.18-2.el8_10.9.src.rpm
pcs-snmp-0:0.10.18-2.el8_10.9.aarch64.rpm
Rocky Linux 8 x86_64 - HighAvailability
pcs-0:0.10.18-2.el8_10.9.src.rpm
pcs-0:0.10.18-2.el8_10.9.x86_64.rpm
pcs-snmp-0:0.10.18-2.el8_10.9.x86_64.rpm
Rocky Linux 8 x86_64 - ResilientStorage
pcs-0:0.10.18-2.el8_10.9.src.rpm
pcs-0:0.10.18-2.el8_10.9.x86_64.rpm
pcs-snmp-0:0.10.18-2.el8_10.9.x86_64.rpm