RHSA-2021:4142: Low: pcs security, bug fix, and enhancement update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594)Security Fix(es): jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656) jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:4142?
The severity of RHSA-2021:4142 is categorized as moderate due to the potential for cross-site scripting vulnerabilities.
How do I fix RHSA-2021:4142?
To fix RHSA-2021:4142, upgrade the pcs and pcs-snmp packages to version 0.10.10-4.el8 or later.
What software is affected by RHSA-2021:4142?
RHSA-2021:4142 affects the pcs and pcs-snmp packages, specifically versions prior to 0.10.10-4.el8.
What security vulnerabilities are addressed in RHSA-2021:4142?
RHSA-2021:4142 addresses a cross-site scripting (XSS) vulnerability in the jquery library.
Is there a need for immediate action regarding RHSA-2021:4142?
Yes, it is recommended to apply the updates for RHSA-2021:4142 as soon as possible to mitigate security risks.