RHSA-2016:2596Medium

Red Hat Security Advisory: pcs security, bug fix, and enhancement update

Published
November 3, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (2)

CVE-2016-0720 →CVE-2016-0721 →

📋 Description

CVE-2016-0720 — pcs: Cross-Site Request Forgery in web UI CVE-2016-0721 — pcs: cookies are not invalidated upon logout

🎯 Affected products12

  • Red Hat Enterprise Linux Server High Availability (v. 7)
  • Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-0:0.9.152-10.el7.s390x as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-0:0.9.152-10.el7.s390x as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-0:0.9.152-10.el7.src as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-0:0.9.152-10.el7.src as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-0:0.9.152-10.el7.x86_64 as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-0:0.9.152-10.el7.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-debuginfo-0:0.9.152-10.el7.s390x as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-debuginfo-0:0.9.152-10.el7.s390x as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • pcs-debuginfo-0:0.9.152-10.el7.x86_64 as a component of Red Hat Enterprise Linux Server High Availability (v. 7)
  • pcs-debuginfo-0:0.9.152-10.el7.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (46)