<div dir="ltr"><div>Hello Gunasekar,</div><div><br></div><div>The mentioned vulnerabilities do not directly affect pcs. Therefore, there are no upstream pcs fixes. Downstream, in RHEL, pcs ships with some bundled components. All 3 of these vulnerabilities affect one of those components - rubygem Rack (<a href="https://rubygems.org/gems/rack">https://rubygems.org/gems/rack</a>). All of them were already fixed, see the following links:</div><div><a href="https://access.redhat.com/security/cve/CVE-2024-25126">https://access.redhat.com/security/cve/CVE-2024-25126</a></div><div><a href="https://access.redhat.com/security/cve/CVE-2024-26141">https://access.redhat.com/security/cve/CVE-2024-26141</a></div><div><a href="https://access.redhat.com/security/cve/CVE-2024-26146">https://access.redhat.com/security/cve/CVE-2024-26146</a></div><br><div>If you have further inquiries about RHEL, I suggest to contact Red Hat support which is better equipped to help you than upstream community members.<br></div><div><br></div><div><br></div><div>Regards,</div><div>Michal<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Aug 6, 2024 at 5:28 PM A Gunasekar via Users <<a href="mailto:users@clusterlabs.org">users@clusterlabs.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-2389210254449196715">
<div lang="EN-IN" style="overflow-wrap: break-word;">
<div class="m_-2389210254449196715WordSection1">
<p class="MsoNormal">Hi Team,<u></u><u></u></p>
<p class="MsoNormal">Please be informed, we have got notified from our security tool that our pcs version 0.10 is affected by the
<b>CVE-2024-25126, CVE-2024-26141 and CVE-2024-26146<u></u><u></u></b></p>
<p class="MsoNormal">It would be great if we help to get answers for the below queries.<u></u><u></u></p>
<p class="MsoNormal"><b><u></u> <u></u></b></p>
<p class="MsoNormal">We are currently in RHEL 8.4 OS and using pcs 0.10 version, Is there any fix planned/available for this affection version (0.10.x) of pcs ?<u></u><u></u></p>
<ul type="disc">
<li class="m_-2389210254449196715m4618491395621331111m-4999658159260330428msolistparagraph">
Let us know in which release this CVEs fix are planned ?<u></u><u></u></li></ul>
<p class="MsoNormal"><b> </b><u></u><u></u></p>
<p class="MsoNormal"><b>Our system Details:-</b><u></u><u></u></p>
<p class="MsoNormal">OS Version: RHEL 8.4<u></u><u></u></p>
<p class="MsoNormal">Name : pcs<u></u><u></u></p>
<p class="MsoNormal">Version : 0.10.16<u></u><u></u></p>
<p class="MsoNormal">Release : 1.el8<u></u><u></u></p>
<p class="MsoNormal">Architecture: x86_64<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<table border="0" cellspacing="8" cellpadding="0">
<tbody>
<tr>
<td style="padding:0.75pt">
<p class="MsoNormal"><a href="http://www.ericsson.com/" target="_blank"><span style="font-size:10pt;font-family:"Ericsson Hilda";color:windowtext;text-decoration:none"><img border="0" width="30" height="30" style="width: 0.3125in; height: 0.3125in;" id="m_-2389210254449196715Picture_x0020_1" src="cid:ii_191286972a14cff311" alt="Ericsson"></span></a><span style="font-size:10pt;font-family:"Ericsson Hilda""><u></u><u></u></span></p>
</td>
</tr>
<tr>
<td style="padding:0.75pt"></td>
</tr>
<tr>
<td style="padding:0.75pt 0.75pt 5pt">
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Ericsson Hilda"">Gunasekar A
</span></b><b><span style="font-size:10pt;font-family:"Ericsson Hilda""><u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Senior
</span><span style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:rgb(38,38,38)">Software Analyst</span><span style="font-size:10pt;font-family:"Ericsson Hilda""><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">BDGS SA BSS PDU BSS PDG EC CH NGCRS<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Mobile: +919894561292<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Ericsson Hilda"">Email ID:
<a href="mailto:a.gunasekar@ericsson.com" target="_blank"><span style="color:rgb(5,99,193)">a.gunasekar@ericsson.com</span></a><b><u></u><u></u></b></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
_______________________________________________<br>
Manage your subscription:<br>
<a href="https://lists.clusterlabs.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.clusterlabs.org/mailman/listinfo/users</a><br>
<br>
ClusterLabs home: <a href="https://www.clusterlabs.org/" rel="noreferrer" target="_blank">https://www.clusterlabs.org/</a><br>
</div></blockquote></div><br clear="all"><br><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>
<p style="font-weight:bold;margin:0px;padding:0px;font-size:14px;font-family:"RedHatText",sans-serif">
<font size="2"><span>MICHAL POSPÍŠIL</span><span></span></font><span style="color:rgb(170,170,170);margin:0px"></span><span style="font-weight:normal"><font size="2"><br>He / Him / His</font></span></p><p style="font-size:12px;margin:0px;font-family:"RedHatText",sans-serif">
<font size="2">Software Engineer</font></p><p style="font-size:12px;margin:0px;font-family:"RedHatText",sans-serif"><font size="2">RHEL HA Cluster - PCS</font></p><p style="font-size:12px;margin:0px;font-family:"RedHatText",sans-serif"><font size="2"><a style="color:rgb(0,136,206);margin:0px;text-decoration:none;font-family:"RedHatText",sans-serif" href="https://www.redhat.com" target="_blank">Red Hat <span>Czech, s.r.o.</span></a></font><font size="2"><br>Purkyňova 665/115, 612 00 Brno</font></p><div style="margin-bottom:4px"><span></span><span>
</span>
</div>
<div style="margin-top:12px">
<table border="0">
<tbody><tr>
<td width="100px"><a href="https://www.redhat.com" target="_blank"> <img src="https://static.redhat.com/libs/redhat/brand-assets/2/corp/logo--200.png" width="90" height="auto"></a> </td>
</tr>
</tbody></table>
</div>
</div></div></div></div></div>