RHSA-2015:0980High

Red Hat Security Advisory: pcs security and bug fix update

Published
May 12, 2015
Last Modified
November 21, 2025

🔗 CVE IDs covered (2)

CVE-2015-1848 →CVE-2015-3983 →

📋 Description

CVE-2015-1848 — pcs: improper web session variable signing CVE-2015-3983 — pcs: improper web session variable signing

🎯 Affected products10

  • Red Hat Enterprise Linux Server High Availability (v. 7)
  • Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-0:0.9.137-13.el7_1.2.src as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-0:0.9.137-13.el7_1.2.src as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-0:0.9.137-13.el7_1.2.x86_64 as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-0:0.9.137-13.el7_1.2.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-debuginfo-0:0.9.137-13.el7_1.2.x86_64 as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-debuginfo-0:0.9.137-13.el7_1.2.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • python-clufter-0:0.9.137-13.el7_1.2.x86_64 as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • python-clufter-0:0.9.137-13.el7_1.2.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)