RHSA-2015:0990High

Red Hat Security Advisory: pcs security and bug fix update

Published
May 12, 2015
Last Modified
November 21, 2025

🔗 CVE IDs covered (2)

📋 Description

CVE-2015-1848 — pcs: improper web session variable signing CVE-2015-3983 — pcs: improper web session variable signing

🎯 Affected products12

  • Red Hat Enterprise Linux High Availability (v. 6)
  • Red Hat Enterprise Linux Resilient Storage (v. 6)
  • pcs-0:0.9.123-9.el6_6.2.i686 as a component of Red Hat Enterprise Linux High Availability (v. 6)
  • pcs-0:0.9.123-9.el6_6.2.i686 as a component of Red Hat Enterprise Linux Resilient Storage (v. 6)
  • pcs-0:0.9.123-9.el6_6.2.src as a component of Red Hat Enterprise Linux High Availability (v. 6)
  • pcs-0:0.9.123-9.el6_6.2.src as a component of Red Hat Enterprise Linux Resilient Storage (v. 6)
  • pcs-0:0.9.123-9.el6_6.2.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 6)
  • pcs-0:0.9.123-9.el6_6.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage (v. 6)
  • pcs-debuginfo-0:0.9.123-9.el6_6.2.i686 as a component of Red Hat Enterprise Linux High Availability (v. 6)
  • pcs-debuginfo-0:0.9.123-9.el6_6.2.i686 as a component of Red Hat Enterprise Linux Resilient Storage (v. 6)
  • pcs-debuginfo-0:0.9.123-9.el6_6.2.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 6)
  • pcs-debuginfo-0:0.9.123-9.el6_6.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage (v. 6)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)