kritik
CVE-2023-2319
pcs: webpack: Regression of CVE-2023-28154 fixes in the Red Hat Enterprise Linux
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Oracle (yüksek).
Açıklama
It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 9 | pcs, pcs-snmp | 0.11.4-7.el9_2 |
| Oracle Linux 9 | pcs, pcs-snmp | 0.11.4-7.el9_2 |
2 kaynaktaki 4 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 9 | pcs | 0.11.4-7.el9_2 |
| alma 9 | pcs-snmp | 0.11.4-7.el9_2 |
| Oracle Linux 9 | pcs | 0.11.4-7.el9_2 |
| Oracle Linux 9 | pcs-snmp | 0.11.4-7.el9_2 |
Referanslar
- https://access.redhat.com/errata/RHSA-2023:2652
- https://access.redhat.com/security/cve/CVE-2023-2319
- https://bugzilla.redhat.com/2176477
- https://bugzilla.redhat.com/2179649
- https://bugzilla.redhat.com/2190092
- https://bugzilla.redhat.com/show_bug.cgi?id=2190092
- https://errata.almalinux.org/9/ALSA-2023-2652.html
- https://linux.oracle.com/cve/CVE-2023-2319.html