CVE-2023-2319

published 2023-05-17

CVE-2023-2319: It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
clusterlabs	pcs	—	—
clusterlabs	pcs	—	—
redhat	enterprise_linux_high_availability	—	—
redhat	enterprise_linux_high_availability_eus	—	—