RLSA-2022:7447 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * pcs: improper authentication via PAM (CVE-2022-1049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section. none-resilientstorage-rpms pcs-snmp-0.10.14-5.el8.aarch64.rpm 67048e23b490ecd4020e8b919ad4fcb73acde5b0c6028a0419f1e3dbfeac63ee pcs-0.10.14-5.el8.aarch64.rpm 29dff6e07380379a7c89f43c0d848077d1dc019c352ce45145600d997a89829e RLBA-2022:7815 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section. none-resilientstorage-rpms libknet1-1.24-2.el8.aarch64.rpm 83109d06e8afb5ffa7919c788d4b9e753e09585180b8d023d5ca089a35c92d31 libknet1-compress-bzip2-plugin-1.24-2.el8.aarch64.rpm 2cf88b2c51a466c922d7c2768f453f9014368179df66fae629454076f24c00d2 libknet1-compress-lz4-plugin-1.24-2.el8.aarch64.rpm a5833dd09c07f9c389780bf2dad065b56d01756c40aef48fad6c39bf12a99d88 libknet1-compress-lzma-plugin-1.24-2.el8.aarch64.rpm 5bc1d8d9d299753a5368db8d4317b8025ab0c520f35fd4a2dd717d4e0edae03e libknet1-compress-lzo2-plugin-1.24-2.el8.aarch64.rpm 787c1886c0fc614ac099c524ee845f76acb9f45c4ebeabcf6ccf46ddab8b0072 libknet1-compress-plugins-all-1.24-2.el8.aarch64.rpm dda900e58b2df66512240addb40caa5b5710ae21f127586db9fc9cb1da9bfde5 libknet1-compress-zlib-plugin-1.24-2.el8.aarch64.rpm dc97baa94ec95d3bfe7d0d9ab83b46d6e04f6429651ecb1cdd1f7b26e571fa26 libknet1-crypto-nss-plugin-1.24-2.el8.aarch64.rpm 7f7ea643b1e0464bbc1d91796b17d6db92182dbfe905ae042f84d73a026831f7 libknet1-crypto-openssl-plugin-1.24-2.el8.aarch64.rpm a5e7d09447698819c48ca9ddcfa05c0cb85637dd1bd0952934927afda68b2803 libknet1-crypto-plugins-all-1.24-2.el8.aarch64.rpm d47df33fa46cc7464d9cb1d351d7224af33095b8282cf4e64833ef6cf8dfb806 libknet1-plugins-all-1.24-2.el8.aarch64.rpm 1afadd649eae81855dbdf62a70a336fa74589cba906e01a3e1fa6dae917133a1 libnozzle1-1.24-2.el8.aarch64.rpm c93a5a5e0b6c7a49fecd9bc7b2dd1990122d9555b61aae3971f757fb86298780 RLBA-2020:3148 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for python-gflags, python-oauth2client, google-api-python-client, python-httplib2, python-uritemplate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Rocky Enterprise Software Foundation OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware. For additional information about the items in this advisory, refer to the Technical Notes chapter of the Release Notes, https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/release_notes/chap-technical_notes none-resilientstorage-rpms python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-httplib2-0.10.3-4.el8.noarch.rpm 6e8b831ea4c97e85d08e061f6ed8f03ffd62a7ab0df8bc9b2f3222fd2c33e8b7 python3-httplib2-0.10.3-4.el8.noarch.rpm 6e8b831ea4c97e85d08e061f6ed8f03ffd62a7ab0df8bc9b2f3222fd2c33e8b7 python3-httplib2-0.10.3-4.el8.noarch.rpm 6e8b831ea4c97e85d08e061f6ed8f03ffd62a7ab0df8bc9b2f3222fd2c33e8b7 python3-httplib2-0.10.3-4.el8.noarch.rpm 6e8b831ea4c97e85d08e061f6ed8f03ffd62a7ab0df8bc9b2f3222fd2c33e8b7 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-httplib2-0.10.3-4.el8.noarch.rpm 6e8b831ea4c97e85d08e061f6ed8f03ffd62a7ab0df8bc9b2f3222fd2c33e8b7 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 RLEA-2019:3314 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for python3-azure-sdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section. none-resilientstorage-rpms python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 python3-azure-sdk-4.0.0-9.el8.noarch.rpm aa7cd4bd1d321e0b302bf94afab40b115c5b5d034382f088f5974b59dfcf54f6 RLBA-2021:1740 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for corosync-qdevice. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References section. none-resilientstorage-rpms corosync-qdevice-3.0.1-1.el8.aarch64.rpm 0f62a1fec7fd9d930c5744936560111700153937cbdaf3281d257b549365dda8 corosync-qdevice-3.0.1-1.el8.aarch64.rpm 0f62a1fec7fd9d930c5744936560111700153937cbdaf3281d257b549365dda8 corosync-qdevice-3.0.1-1.el8.aarch64.rpm 0f62a1fec7fd9d930c5744936560111700153937cbdaf3281d257b549365dda8 corosync-qdevice-3.0.1-1.el8.aarch64.rpm 0f62a1fec7fd9d930c5744936560111700153937cbdaf3281d257b549365dda8 corosync-qnetd-3.0.1-1.el8.aarch64.rpm f97b0e7e525aef232ef57cf5521623c7477c333d7ba1100a11bdfc671ac5c1b7 corosync-qnetd-3.0.1-1.el8.aarch64.rpm f97b0e7e525aef232ef57cf5521623c7477c333d7ba1100a11bdfc671ac5c1b7 corosync-qnetd-3.0.1-1.el8.aarch64.rpm f97b0e7e525aef232ef57cf5521623c7477c333d7ba1100a11bdfc671ac5c1b7 corosync-qnetd-3.0.1-1.el8.aarch64.rpm f97b0e7e525aef232ef57cf5521623c7477c333d7ba1100a11bdfc671ac5c1b7 RLEA-2021:3483 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for google-api-python-client, python-gflags, python-oauth2client, python-uritemplate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Rocky Enterprise Software Foundation OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware. For additional information about the items in this advisory, refer to the Technical Notes chapter of the Release Notes, https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16 .2/html/release_notes/chap-technical_notes none-resilientstorage-rpms python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 python3-gflags-2.0-13.el8.noarch.rpm 8cac8dc7fe48f077355f298618945b2792ac9abd033ad53edc5eeea17ca9cf7c python3-google-api-client-1.6.5-3.el8.noarch.rpm 2ce75f035008a471ebbf565ec52f63568abcf338cdd7d5994d2de7b2b7001c56 python3-oauth2client-4.1.2-6.el8.noarch.rpm c2725cc8a16722c6642621a1a479d94bf8da307834b1d80178b5ad71fab363b9 python3-uritemplate-3.0.0-3.el8.noarch.rpm a5d0d004c1b556772f5de2ca54e28a561aea0f0d4186343418f1bb8416493455 RLBA-2022:7454 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for booth. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section. none-resilientstorage-rpms booth-1.0-199.2.ac1d34c.git.el8.aarch64.rpm 58fd712469126c4f2c55ed362b601e47ea40ba02fbe40c88268942c81f27649f booth-arbitrator-1.0-199.2.ac1d34c.git.el8.noarch.rpm 6bde07ed2cbf728a7a1e7cea0155f5073747401047b072b55efefd176553e716 booth-arbitrator-1.0-199.2.ac1d34c.git.el8.noarch.rpm 6bde07ed2cbf728a7a1e7cea0155f5073747401047b072b55efefd176553e716 booth-core-1.0-199.2.ac1d34c.git.el8.aarch64.rpm 87ba589b09df0762944560553963bd40c6413cd176a4f95098f49181d9372932 booth-site-1.0-199.2.ac1d34c.git.el8.noarch.rpm 0de36f517ccbb9fe472995e866243e82ec8e3f16b1d96c748d2b3a40ffac123f booth-site-1.0-199.2.ac1d34c.git.el8.noarch.rpm 0de36f517ccbb9fe472995e866243e82ec8e3f16b1d96c748d2b3a40ffac123f booth-test-1.0-199.2.ac1d34c.git.el8.noarch.rpm 19010dc94aa1435246540affaec7b27768cdc17d7f1bd1325479eec9d1652053 booth-test-1.0-199.2.ac1d34c.git.el8.noarch.rpm 19010dc94aa1435246540affaec7b27768cdc17d7f1bd1325479eec9d1652053 RLEA-2022:7823 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * azure-events-az: Resource agent azure-events testing issue (BZ#2130986) * IPsrcaddr: Fail to perform the stop operation with `Error: Invalid scope` (BZ#2134536) none-resilientstorage-rpms resource-agents-4.9.0-29.el8_7.2.aarch64.rpm 15c3e6a54a7bd3ddf346fbc7f1bcd67a3f2180819ec3753e7259311e1ccd52d6 resource-agents-paf-4.9.0-29.el8_7.2.aarch64.rpm 3775ff9b39d6c982a15a77ac7168f2427f6c49db60613bb5e41c9db69f1d8fd5 RLBA-2023:0108 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * vdo-vol: If the underlying device used does not exist, then the probe will always fail (BZ#2144866) none-resilientstorage-rpms resource-agents-4.9.0-29.el8_7.3.aarch64.rpm bbcc048df0c768c9e0e069807cde0f737139eaeea07ce3b5db30cdbadb04bb79 resource-agents-paf-4.9.0-29.el8_7.3.aarch64.rpm f0696b8b6dc8c7a990c8a61259210888a58a9b5c2c318905b3d30f1677545911 RLBA-2023:0127 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Bug Fix(es) and Enhancement(s): * 'pcs resource config' fails to print boolean attributes set to false. (BZ#2151577) none-resilientstorage-rpms pcs-0.10.14-5.el8_7.1.aarch64.rpm bc6b182e9abd120ff7a5980cc46ae0ffb958a4496481e948ec4cb922621c0526 pcs-snmp-0.10.14-5.el8_7.1.aarch64.rpm dc62e88fdfb2483fdac888686ce9e62eed1928cb0a5d94caba37b9308c60fff1 RLBA-2021:1994 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for corosync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Bug Fix(es) and Enhancement(s): * corosync crash with compression enabled (BZ#1951049) none-resilientstorage-rpms corosync-3.1.0-3.el8_4.1.aarch64.rpm ebb529f8cac8408ca6751d0cffc35fdbe02726e8e8d5ec8c4a555a79abf20484 corosynclib-devel-3.1.0-3.el8_4.1.aarch64.rpm 1333bc92fb54364df1ac7a377957d34e5df24c7d4069e3166903193be44954db spausedd-3.1.0-3.el8_4.1.aarch64.rpm a7b134c0e6fb218c1b7778816270d23fcd466cf20757e019e18c824032473b80 RLBA-2021:1996 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fix(es) and Enhancement(s): * crm_mon not able to detect resource-status when used in stop-operation of a Resource Agent during node shutdown (BZ#1951098) none-resilientstorage-rpms pacemaker-2.0.5-9.el8_4.1.aarch64.rpm bd09d916f1016c45694912d755b688b613a730309533211c89fe9c8f2fbe7664 pacemaker-cli-2.0.5-9.el8_4.1.aarch64.rpm 6001002f7886369e2a621af1cdf63b138f36847ac74f4647c51dddba23e6357e pacemaker-cts-2.0.5-9.el8_4.1.noarch.rpm 5ad12998f574d7a7bd4ab19d37dfb144d93a2b1a110db058e67bf732a21ac497 pacemaker-cts-2.0.5-9.el8_4.1.noarch.rpm 5ad12998f574d7a7bd4ab19d37dfb144d93a2b1a110db058e67bf732a21ac497 pacemaker-doc-2.0.5-9.el8_4.1.noarch.rpm 503a9d9713a9ec33a39cc2c366bb9665650123c85358d6948ed431ecffb7cefa pacemaker-doc-2.0.5-9.el8_4.1.noarch.rpm 503a9d9713a9ec33a39cc2c366bb9665650123c85358d6948ed431ecffb7cefa pacemaker-libs-devel-2.0.5-9.el8_4.1.aarch64.rpm d1feddd1febc9dcc7c279a0200be1202b8cb5bc7dc7d8f9fb84d51c895c342c1 pacemaker-nagios-plugins-metadata-2.0.5-9.el8_4.1.noarch.rpm e8538732f6cd1aab692f3cc3cbbbde658b2a4be6ce64b678314c677a910fe179 pacemaker-nagios-plugins-metadata-2.0.5-9.el8_4.1.noarch.rpm e8538732f6cd1aab692f3cc3cbbbde658b2a4be6ce64b678314c677a910fe179 pacemaker-remote-2.0.5-9.el8_4.1.aarch64.rpm 5456504f5b755d673dcc3bc2e6560e7fb52e38d62c29cf8354b302a5e23a8bd6 RLEA-2021:3067 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for fence-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Bug Fix(es) and Enhancement(s): * fence_aws: add filter parameter to be able to limit which nodes are listed (BZ#1977819) none-resilientstorage-rpms fence-agents-aws-4.2.1-65.el8_4.1.noarch.rpm 1b2789e0f34178a43248d4c5b927c0ee41ffec5acc3a4f0529952f5294e5ad60 fence-agents-azure-arm-4.2.1-65.el8_4.1.noarch.rpm f0140066909e1e71dcc157297321bd6fb2228b24a75f58d1bee1ad19e7298cf1 fence-agents-azure-arm-4.2.1-65.el8_4.1.noarch.rpm f0140066909e1e71dcc157297321bd6fb2228b24a75f58d1bee1ad19e7298cf1 fence-agents-gce-4.2.1-65.el8_4.1.noarch.rpm d27a40132aa171fe623ae2934aae5c04383c00e13fde51c36d76d8c87cd12c9f fence-agents-gce-4.2.1-65.el8_4.1.noarch.rpm d27a40132aa171fe623ae2934aae5c04383c00e13fde51c36d76d8c87cd12c9f RLBA-2021:1736 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References section. none-resilientstorage-rpms resource-agents-4.1.1-90.el8.aarch64.rpm 09f70fc09b45c2a48edaa4595708f7df8268e87cb720c48e9f5a4ee95ff4207a RLBA-2021:1738 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for booth. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References section. none-resilientstorage-rpms booth-1.0-199.1.ac1d34c.git.el8.aarch64.rpm 536ddd1139d60e7c96d623007096410ff537560381e814cd64c36ff361ae7a3b booth-1.0-199.1.ac1d34c.git.el8.aarch64.rpm 536ddd1139d60e7c96d623007096410ff537560381e814cd64c36ff361ae7a3b booth-1.0-199.1.ac1d34c.git.el8.aarch64.rpm 536ddd1139d60e7c96d623007096410ff537560381e814cd64c36ff361ae7a3b booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm 51cd9aba129ac42cc00b8470d481ae942288fa1d8d3bc10e4cf8024fc6981c91 booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm 51cd9aba129ac42cc00b8470d481ae942288fa1d8d3bc10e4cf8024fc6981c91 booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm 51cd9aba129ac42cc00b8470d481ae942288fa1d8d3bc10e4cf8024fc6981c91 booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm 51cd9aba129ac42cc00b8470d481ae942288fa1d8d3bc10e4cf8024fc6981c91 booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm 51cd9aba129ac42cc00b8470d481ae942288fa1d8d3bc10e4cf8024fc6981c91 booth-arbitrator-1.0-199.1.ac1d34c.git.el8.noarch.rpm 51cd9aba129ac42cc00b8470d481ae942288fa1d8d3bc10e4cf8024fc6981c91 booth-core-1.0-199.1.ac1d34c.git.el8.aarch64.rpm b3cb518af02430072f71a4e865ebc254e20768f19294d71508ccafe7e9af9a57 booth-core-1.0-199.1.ac1d34c.git.el8.aarch64.rpm b3cb518af02430072f71a4e865ebc254e20768f19294d71508ccafe7e9af9a57 booth-core-1.0-199.1.ac1d34c.git.el8.aarch64.rpm b3cb518af02430072f71a4e865ebc254e20768f19294d71508ccafe7e9af9a57 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 033975bd088ef5398306c8ab5a268ca9711c5afeb16a730927305d359e742704 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 033975bd088ef5398306c8ab5a268ca9711c5afeb16a730927305d359e742704 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 033975bd088ef5398306c8ab5a268ca9711c5afeb16a730927305d359e742704 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 033975bd088ef5398306c8ab5a268ca9711c5afeb16a730927305d359e742704 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 033975bd088ef5398306c8ab5a268ca9711c5afeb16a730927305d359e742704 booth-site-1.0-199.1.ac1d34c.git.el8.noarch.rpm 033975bd088ef5398306c8ab5a268ca9711c5afeb16a730927305d359e742704 booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm ceebaa357fbe18c6b6b6c577f089245ef8580ec2d0119f4abfe2737d59b715bc booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm ceebaa357fbe18c6b6b6c577f089245ef8580ec2d0119f4abfe2737d59b715bc booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm ceebaa357fbe18c6b6b6c577f089245ef8580ec2d0119f4abfe2737d59b715bc booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm ceebaa357fbe18c6b6b6c577f089245ef8580ec2d0119f4abfe2737d59b715bc booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm ceebaa357fbe18c6b6b6c577f089245ef8580ec2d0119f4abfe2737d59b715bc booth-test-1.0-199.1.ac1d34c.git.el8.noarch.rpm ceebaa357fbe18c6b6b6c577f089245ef8580ec2d0119f4abfe2737d59b715bc RLEA-2021:1737 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References section. none-resilientstorage-rpms pcs-0.10.8-1.el8.aarch64.rpm b55e9c24a42e1b5ce429ec33e5781c97678bf95590ef7e017e84554cef389f1c pcs-snmp-0.10.8-1.el8.aarch64.rpm 7d266128cabb8d53d34caa39e0f23343736f2610c5b7d51275102e008b7758f2 RLBA-2021:1963 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References section. none-resilientstorage-rpms libknet1-1.18-1.el8.aarch64.rpm e3756e58a0ae455b9a46e2875a70cef0f4edd14e50e3b0aead75c606da56e650 libknet1-1.18-1.el8.aarch64.rpm e3756e58a0ae455b9a46e2875a70cef0f4edd14e50e3b0aead75c606da56e650 libknet1-compress-bzip2-plugin-1.18-1.el8.aarch64.rpm 31cb8b35b6221a55a151598689fcffdf5b30d22d9e2afebba40a67aa16292d8d libknet1-compress-bzip2-plugin-1.18-1.el8.aarch64.rpm 31cb8b35b6221a55a151598689fcffdf5b30d22d9e2afebba40a67aa16292d8d libknet1-compress-lz4-plugin-1.18-1.el8.aarch64.rpm 60d16503d02a621372acff4efd062d762b8e68affe7f816fa1bda1a21296a7b1 libknet1-compress-lz4-plugin-1.18-1.el8.aarch64.rpm 60d16503d02a621372acff4efd062d762b8e68affe7f816fa1bda1a21296a7b1 libknet1-compress-lzma-plugin-1.18-1.el8.aarch64.rpm 62ba06240ac0aecde381be37b8f7df21307f9e1e0436d8d76d2ec530bf83e5be libknet1-compress-lzma-plugin-1.18-1.el8.aarch64.rpm 62ba06240ac0aecde381be37b8f7df21307f9e1e0436d8d76d2ec530bf83e5be libknet1-compress-lzo2-plugin-1.18-1.el8.aarch64.rpm f3b8a5d3f8201247712f778bff043141993dbfd30806056fbd7364e2c557ff45 libknet1-compress-lzo2-plugin-1.18-1.el8.aarch64.rpm f3b8a5d3f8201247712f778bff043141993dbfd30806056fbd7364e2c557ff45 libknet1-compress-plugins-all-1.18-1.el8.aarch64.rpm 26631686f8adac40d9fefaf6be7e6c69b0cef156bbfa13725ed424d0c69cf7af libknet1-compress-plugins-all-1.18-1.el8.aarch64.rpm 26631686f8adac40d9fefaf6be7e6c69b0cef156bbfa13725ed424d0c69cf7af libknet1-compress-zlib-plugin-1.18-1.el8.aarch64.rpm 218a1b8189c9d2ae93a1310410a954ab0c6d61dbf3e014d866d05a4c416c4673 libknet1-compress-zlib-plugin-1.18-1.el8.aarch64.rpm 218a1b8189c9d2ae93a1310410a954ab0c6d61dbf3e014d866d05a4c416c4673 libknet1-crypto-nss-plugin-1.18-1.el8.aarch64.rpm f8c9a526f0339a65a1a2cab99b50028d848066d546a7b8c791386236693b9213 libknet1-crypto-nss-plugin-1.18-1.el8.aarch64.rpm f8c9a526f0339a65a1a2cab99b50028d848066d546a7b8c791386236693b9213 libknet1-crypto-openssl-plugin-1.18-1.el8.aarch64.rpm 9b04e8f59a4dfc7c735fd2a6977facbf0aa6a452d47478ce9794f36e5a1ddd97 libknet1-crypto-openssl-plugin-1.18-1.el8.aarch64.rpm 9b04e8f59a4dfc7c735fd2a6977facbf0aa6a452d47478ce9794f36e5a1ddd97 libknet1-crypto-plugins-all-1.18-1.el8.aarch64.rpm c5d63bb4797b2c3c0f401f312aa3bd698aaafbd7219d66b1bf6e30b80852e39c libknet1-crypto-plugins-all-1.18-1.el8.aarch64.rpm c5d63bb4797b2c3c0f401f312aa3bd698aaafbd7219d66b1bf6e30b80852e39c libknet1-plugins-all-1.18-1.el8.aarch64.rpm 74357d14ed5886126e5935667276df06432d3537e26d56bef845de626b7e3054 libknet1-plugins-all-1.18-1.el8.aarch64.rpm 74357d14ed5886126e5935667276df06432d3537e26d56bef845de626b7e3054 libnozzle1-1.18-1.el8.aarch64.rpm 95cfc60ddad0bc6f098545d01c61a42187ff0f52cdbd3f8fa74f3d587d48b2de libnozzle1-1.18-1.el8.aarch64.rpm 95cfc60ddad0bc6f098545d01c61a42187ff0f52cdbd3f8fa74f3d587d48b2de RLBA-2021:2598 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * aws-vpc-move-ip: Enable eni lookup for AWS shared networks via RAM (BZ#1943093) * resource agent bails out when podman fails to start container under heavy load (BZ#1973035) none-resilientstorage-rpms resource-agents-4.1.1-90.el8_4.5.aarch64.rpm 9f13208ce8039c1c53a75d2b927af3adac652e609443c731edc0814f3c59b91c RLBA-2021:3089 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * podman resource agent logs spurious failed resource actions (BZ#1986868) none-resilientstorage-rpms resource-agents-4.1.1-90.el8_4.6.aarch64.rpm 2d03fce1405c5994a08156809bfa9228cf3830121717b4805cbd1f1e0258ae04 RLBA-2021:3579 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * LVM-activate: Start operation always recreates drop-in file and runs systemctl daemon-reload (BZ#1972236) none-resilientstorage-rpms resource-agents-4.1.1-90.el8_4.7.aarch64.rpm 2fd288810c5e783bd385f76f9f86d4b48e1226443e78c34d28791689ce8a9abd RLSA-2021:4139 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270) * python-pygments: ReDoS in multiple lexers (CVE-2021-27291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section. none-resilientstorage-rpms resource-agents-4.1.1-98.el8.aarch64.rpm 01fca3f4c1005a099232d4f4e5d5a0819093aae2866336a519611800d1e29247 resource-agents-paf-4.1.1-98.el8.aarch64.rpm c10e7e58204214715c7d7b821c28641d9c8d56b5c04431f51dedbbba80a902da RLBA-2021:4897 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Kronosnet (knet) is a network abstraction layer designed for High Availability use cases. Bug Fix(es) and Enhancement(s): * Revert defrag buffer changes that could potentially cause instability. (BZ#2023847) none-resilientstorage-rpms libknet1-1.18-4.el8_5.aarch64.rpm 72fb03100311cc2f2e7633402f8adf28691d5a642d0580432893c23c5602e132 libknet1-compress-bzip2-plugin-1.18-4.el8_5.aarch64.rpm 2bd849ff1a3bd4accd572cf6dc4a78fc5e9717c3180b8fc5dfc91828105bd686 libknet1-compress-lz4-plugin-1.18-4.el8_5.aarch64.rpm f7700f5be96ac8cced78c448e84a35911502e5c50c95b384aed2a306ed8efee9 libknet1-compress-lzma-plugin-1.18-4.el8_5.aarch64.rpm df6e4b3a303a051552435064118487951087f4e0baed76ccb4d18e676d487c7c libknet1-compress-lzo2-plugin-1.18-4.el8_5.aarch64.rpm b2cd3cc729cd0c170544606236c5091589058efa143504e7105286374e7a3292 libknet1-compress-plugins-all-1.18-4.el8_5.aarch64.rpm b52740eafe12f744336f7b57305e550ad58c2e92ec3c1039ea791bdb45518da3 libknet1-compress-zlib-plugin-1.18-4.el8_5.aarch64.rpm 1dcbcdfbdc2adf17acec37895149a47bf0e979f5b3aeee0332a8903f68460bd4 libknet1-crypto-nss-plugin-1.18-4.el8_5.aarch64.rpm 3e8bbe33d86eb1a12a26bb907202512fd0dcd066770a16da665c99f1b5b20570 libknet1-crypto-openssl-plugin-1.18-4.el8_5.aarch64.rpm c422b39c37e4523b2aef49b2261369c6b8d266a15e67aa03014a2194f29754f7 libknet1-crypto-plugins-all-1.18-4.el8_5.aarch64.rpm c079225a54c651b4e97358f02cb3b51962036a6e90b87a5113021b1042475ae7 libknet1-plugins-all-1.18-4.el8_5.aarch64.rpm e50ef285e3af3bc0c8211109ec449e17d59942513cfdc2a166e8afa882871fd4 libnozzle1-1.18-4.el8_5.aarch64.rpm d8f1c45b5d59731f299dc178ed246ed5caa6bd2cf0ce17bfa12385f774d72af8 RLSA-2021:4142 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Low

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594) Security Fix(es): * jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656) * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section. none-resilientstorage-rpms pcs-0.10.10-4.el8.aarch64.rpm 05ef19ad68bdc9b5355f7e92136f040d096d26801dd36a73797b920a5a16aa94 pcs-snmp-0.10.10-4.el8.aarch64.rpm 5d53e9fc9196cfd927cb91542da93223bdd5e200c83b90a89f8b0c87bbeaffee RLBA-2022:0347 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed API call returns OCF_ERR_CONFIGURED, preventing restarts (BZ#2008955) * gcp-vpc-move-route and gcp-vpc-move-vip can fail with permission denied errors if token file is not found (BZ#2011839) none-resilientstorage-rpms resource-agents-4.1.1-98.el8_5.2.aarch64.rpm c97f54ba2107181544fd6c9217c105bdeba7f4165df1a1846a500cfbfed5131d resource-agents-paf-4.1.1-98.el8_5.2.aarch64.rpm d1e60f56ed7c9f509841d49173b1796c7ba772c5e8feb1cdff55dfcaaa4b895a RLBA-2022:1974 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section. none-resilientstorage-rpms resource-agents-4.9.0-16.el8.aarch64.rpm 93dbd0289f2734e61c365b969aec21950ab1dde5c9abb9997a83722fb61dd5a2 resource-agents-paf-4.9.0-16.el8.aarch64.rpm d6e818755572ccea220bc89a353dcd868ca82b0126e822b60dd69d48d5e705af RLBA-2022:2127 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section. none-resilientstorage-rpms libknet1-1.22-1.el8.aarch64.rpm 5585d96a457d0a7e15e0936958b4def9b89aac5938c0b061f25c5793db84b205 libknet1-compress-bzip2-plugin-1.22-1.el8.aarch64.rpm 1a798ff549b3158ac6409494011af8d510a602fa0e5ce633fde66d1d9f38b428 libknet1-compress-lz4-plugin-1.22-1.el8.aarch64.rpm c3a6e3253909ed8a1aae19a8790637aea6011d3f245e734b21af66a13585bfc1 libknet1-compress-lzma-plugin-1.22-1.el8.aarch64.rpm 5f602d75a534428cb28a699ca7d71bc886f2c96a049695bdf29df7efe2fa0f01 libknet1-compress-lzo2-plugin-1.22-1.el8.aarch64.rpm 5377a47e75b0be93b55cee632903df13e3266692a7b930497973f004f7d8d3ac libknet1-compress-plugins-all-1.22-1.el8.aarch64.rpm 25547f5933eb3e8aef849a792327589b6db5ef441938c261194058ce843aefdf libknet1-compress-zlib-plugin-1.22-1.el8.aarch64.rpm 4633f874a0187e4a0ad003196c54df37c8ec46901418b569ae26a947b9380ce1 libknet1-crypto-nss-plugin-1.22-1.el8.aarch64.rpm 0514260995a687dd84e45c41372451d9a120d244ddf188198149c979b5b1be3b libknet1-crypto-openssl-plugin-1.22-1.el8.aarch64.rpm b30517d122cd5909bd22c0062686b3a30ae99affed8ec147227f889e234068d9 libknet1-crypto-plugins-all-1.22-1.el8.aarch64.rpm ab5dea3d84b64dd85e53813809f13ef0b66fa4810eb87541ff03fba8c6906e66 libknet1-plugins-all-1.22-1.el8.aarch64.rpm a645918bc13f915281170d5689eec32e5a208364ebde2c19fb15b9ebf34bbbf8 libnozzle1-1.22-1.el8.aarch64.rpm 73f3eae61a666e04d0855aef1b913a8dc47266be7a4d41764d8980fe7a46bcd1 RLEA-2022:1978 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section. none-resilientstorage-rpms pcs-0.10.12-6.el8.aarch64.rpm ccfc9f0e6f2de6741a0c6550068633eeeb9c6c6ba7e474169e84116a65f6479d pcs-snmp-0.10.12-6.el8.aarch64.rpm 6719579035372a6521d4725575a6adb21fda86795c756028021f9417d5d6d572 RLBA-2022:6436 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Kronosnet (knet) is a network abstraction layer designed for High Availability use cases. Bug Fix(es) and Enhancement(s): * node randomly not rejoining cluster after a pcs cluster stop/start (BZ#2112924) none-resilientstorage-rpms libknet1-1.22-2.el8_6.aarch64.rpm 58307439864d6ecfdce8e02d3bd553e7b6d8da3e39e067123d39e63c0bc95429 libknet1-compress-bzip2-plugin-1.22-2.el8_6.aarch64.rpm 738cd181bab7e57683cd3c5b924af7606790e8fc1be70441d157b69d44c296f4 libknet1-compress-lz4-plugin-1.22-2.el8_6.aarch64.rpm 33303d229f7524f577b81f659b7ddbb4ac2abdeb9bb4ea7fe4d87279e974f3e0 libknet1-compress-lzma-plugin-1.22-2.el8_6.aarch64.rpm 10994b48cf95a6a0f43ddfc25f607b4afd1936662e6b6c8f69b317090e8071f6 libknet1-compress-lzo2-plugin-1.22-2.el8_6.aarch64.rpm 6413fe79c1deec7a3b4719df2ff4b98dbc157a13f3f93b2790e528897dceaf88 libknet1-compress-plugins-all-1.22-2.el8_6.aarch64.rpm a750af905e9896a193953d50ec21aabda172f97a7dff0a6bff5ad71350f706f8 libknet1-compress-zlib-plugin-1.22-2.el8_6.aarch64.rpm c14dda8dc4f61b803b504a0dae79d06bc1c9432ab4a4f5769dde8920a06dbfed libknet1-crypto-nss-plugin-1.22-2.el8_6.aarch64.rpm b737c98c89c482b450d9e141e3442b97d3edec5729346f28326b24229dfc2020 libknet1-crypto-openssl-plugin-1.22-2.el8_6.aarch64.rpm d05b7f1811375414dc745b9418f24a217efd6cf11cb392bf48c4ea225db7c76d libknet1-crypto-plugins-all-1.22-2.el8_6.aarch64.rpm 4d8e3ff1c2df94380d64e2ee31a6169ae192f71a7ab3bf5bbdf5d614ccf8e095 libknet1-plugins-all-1.22-2.el8_6.aarch64.rpm e4db6bf798a5f3ac8aded69b4c9cdd5e3ab3cc7b7033ba8f8c670ccbef6f162c libnozzle1-1.22-2.el8_6.aarch64.rpm 9d755e13a50fada07e61fa6c9e386bda264e640c46c32385ea93a341235095cb RLSA-2022:4661 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Important

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: path traversal possible outside of public_dir when serving static files (CVE-2022-29970) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.12-6.el8_6.1.aarch64.rpm c32de7d9b6c77cdb778bd57b84d45277baa135445a76a01913478e4e7f1f8c6f pcs-snmp-0.10.12-6.el8_6.1.aarch64.rpm ec63a2c64025d3c54844fb07585b2c9c7c3f090c412c07dbcd38de3f6c5a17e5 RLSA-2022:6314 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Important

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * pcs: obtaining an authentication token for hacluster user could lead to privilege escalation (CVE-2022-2735) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.12-6.el8_6.2.aarch64.rpm e649ef2c602de8f220a1f956cabead3550f41a9ff061d2dff003ba411a034bf9 pcs-snmp-0.10.12-6.el8_6.2.aarch64.rpm d56ab372fd111b96408a97e2ab7bc71fafa68800356353287e39cda864074943 RLBA-2022:6438 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * The resource-agent ocf:heartbeat:CTDB fails to start because of "Unable to set scheduler to SCHED_FIFO (Operation not permitted)" (BZ#2092262) none-resilientstorage-rpms resource-agents-4.9.0-16.el8_6.2.aarch64.rpm 81beef66eda7fc86fa9c8f3b1286a4cad1e54544940cea3e4201d11e4a957371 resource-agents-paf-4.9.0-16.el8_6.2.aarch64.rpm 3d3cf3b62b95287f1035ce2354cb535b3e736a490bd92896847cd4336bd8f991 RLSA-2022:6439 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for booth. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time. Security Fix(es): * booth: authfile directive in booth config file is completely ignored. (CVE-2022-2553) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms booth-1.0-199.1.ac1d34c.git.el8_6.1.aarch64.rpm c993f76480dced1b6b4d17b37e3eecd1aa8fbc199a64b58a95b804243fed9ad2 booth-arbitrator-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 02c3534fb45649dbbbc29143ed06549526082536b35038d8f328851a36dae19a booth-arbitrator-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 02c3534fb45649dbbbc29143ed06549526082536b35038d8f328851a36dae19a booth-core-1.0-199.1.ac1d34c.git.el8_6.1.aarch64.rpm 2fce954cedceaf5b38d5feaa1c8d5000c2f1e92621a1818534ae4380d834a9da booth-site-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 473419eeb77f2b42043368139ffb0741ea3b5a881ebd87e6624b78b8c39276ee booth-site-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 473419eeb77f2b42043368139ffb0741ea3b5a881ebd87e6624b78b8c39276ee booth-test-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 0f6768c0a35d945b24bf5ea47820752b0060a09fa6042b8b9c270c9634ebcfd1 booth-test-1.0-199.1.ac1d34c.git.el8_6.1.noarch.rpm 0f6768c0a35d945b24bf5ea47820752b0060a09fa6042b8b9c270c9634ebcfd1 RLEA-2022:7136 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * IPsrcaddr: Fail to perform the stop operation with `Error: Invalid scope`. (BZ#2134539) none-resilientstorage-rpms resource-agents-4.9.0-16.el8_6.5.aarch64.rpm 811b25c4fb4de1e70169a2c3b1c2b19c691ebb8c64931a8063f07ffca9fb60e9 resource-agents-paf-4.9.0-16.el8_6.5.aarch64.rpm 6ba9753f7e0096d3de9f9fb4487eed2ffe30646f87ef1b94a4f97eca8876e9ea RLBA-2022:7443 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section. none-resilientstorage-rpms resource-agents-4.9.0-29.el8_7.2.aarch64.rpm 15c3e6a54a7bd3ddf346fbc7f1bcd67a3f2180819ec3753e7259311e1ccd52d6 resource-agents-paf-4.9.0-29.el8_7.2.aarch64.rpm 3775ff9b39d6c982a15a77ac7168f2427f6c49db60613bb5e41c9db69f1d8fd5 RLBA-2023:1585 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for corosync-qdevice. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The corosync-qdevice package contains the Corosync Cluster Engine Qdevice, a script for creating NSS certificates and an init script. Bug Fix(es) and Enhancement(s): * corosync-qdevice service dies sometime after the network with the quorum device is lost (BZ#2180246) none-resilientstorage-rpms corosync-qdevice-3.0.1-1.el8_7.1.aarch64.rpm fa7c2264d3672d0492d9d487156c7ddc2a93e969f179debe110b5bce22fe5d35 corosync-qnetd-3.0.1-1.el8_7.1.aarch64.rpm 7b68be56886dc6589ac145b622d29cd95e039c7cb2cf86b9c38282d5cf0aaa30 RLSA-2023:0855 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: Reflected File Download attack (CVE-2022-45442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.14-5.el8_7.2.aarch64.rpm 419b500cfc8a491187840abe68ec9b95fd21952738ea6df0dc4cdfcf422523d6 pcs-snmp-0.10.14-5.el8_7.2.aarch64.rpm 05aac33ae9973ec564f16178692e0a56b4137f06d3acb7a49b2a53bc514ff74c RLSA-2023:3082 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530) * rubygem-rack: denial of service in header parsing (CVE-2023-27539) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Command 'pcs config checkpoint diff' does not show configuration differences between checkpoints (BZ#2180700) * Need a way to add a scsi fencing device to a cluster without requiring a restart of all cluster resources (BZ#2180706) none-resilientstorage-rpms pcs-0.10.15-4.el8_8.1.aarch64.rpm 4c487c457474975f741d43ebdbde4a7e57ade4929067aba1b5fc8d33d9e6b54e pcs-snmp-0.10.15-4.el8_8.1.aarch64.rpm 20e5ac61ceb24d3239eab1c4b6bb3b22806adbef3def14413fb6d7bff386051a RLBA-2023:4540 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es): * azure-events-az fails with pacemaker => 2.1 with missing transition summary (BZ#2182761) none-resilientstorage-rpms resource-agents-4.9.0-40.el8_8.1.aarch64.rpm 12d5d97f286e85998b032f3fe6f04ea6f2e67c15e005c6587e2e60bb320d0f06 resource-agents-paf-4.9.0-40.el8_8.1.aarch64.rpm 41bd2f90a703286f25174fbc37ed974b6b4fae532bf4ce60950ef8cb1e6a5038 RLBA-2023:6903 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section. none-resilientstorage-rpms pcs-0.10.17-2.el8.aarch64.rpm 9e2b5e9702e0098eed82d2041db87dcd04972af3edbfbbbbadb13cc79c71d0de pcs-snmp-0.10.17-2.el8.aarch64.rpm dd2b49dcd73a4abb66146afbb454cf013cbec464085082ef9421a3363899101b RLBA-2024:3239 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for kronosnet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section. none-resilientstorage-rpms libknet1-1.28-1.el8.aarch64.rpm 11a4e3bcd97c446b6496e01dc2e1c393d8230da8a28da07777cacf5ed99d8ed4 libknet1-compress-bzip2-plugin-1.28-1.el8.aarch64.rpm b7d7468f066777ae3e8b8ddca3cde3d9ace564c94f40a189f19e69397e5f1761 libknet1-compress-lz4-plugin-1.28-1.el8.aarch64.rpm b29903a8f104a01f83d0a648bad2daa8a26a9629a8b4d5bb180d0a057566a612 libknet1-compress-lzma-plugin-1.28-1.el8.aarch64.rpm e6d60186a069f9b93c20bd43a4519b64cc55342505c8147c1a76093ee247fe9f libknet1-compress-lzo2-plugin-1.28-1.el8.aarch64.rpm a77f169af00c7369d5629cefbee84aa9c4ea213e5ab1b0af49361ed13ef85112 libknet1-compress-plugins-all-1.28-1.el8.aarch64.rpm bb02d26ddf9d356995c8d2ec1b366ff11f7b713a1adfa4117ee4a9e1be0d5ca3 libknet1-compress-zlib-plugin-1.28-1.el8.aarch64.rpm b458b240f9aea08691fa6a0dc4d58a2eb5caac2121560d8fb5025e19e428a329 libknet1-crypto-nss-plugin-1.28-1.el8.aarch64.rpm 84fc96f9622312734418110a70a73142fabb970dcec61ccd1a45dbba761ea729 libknet1-crypto-openssl-plugin-1.28-1.el8.aarch64.rpm a84e96548f772a175789ece838f0d7ccf15e95af4af8bf05f1768270bc253feb libknet1-crypto-plugins-all-1.28-1.el8.aarch64.rpm ccd050edc4d087d73c963d672e75b2c384fd3b04300e100d45712bd8b4b7eff0 libknet1-plugins-all-1.28-1.el8.aarch64.rpm ce1b95eaae6e54dae7f62f41ad1f1398d3893d3ca76c2f7ca2a8366975bbd7c0 libnozzle1-1.28-1.el8.aarch64.rpm 2e0acaf3b47ea21d4af86293b2ee6cf8bd4397659dd2c5711070e1febcdb73eb RLSA-2024:2953 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126) * rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141) * rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.aarch64.rpm 378ce87622efa16867676cc266722e736d746dd3082c8791ae533a11cc196ece pcs-snmp-0.10.18-2.el8_10.aarch64.rpm 9a37ac0debb651a60a0aa5320ee83fe09a1aa4fe83d8c711aa08396b8488f0ad RLSA-2024:3659 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Important

An update is available for booth. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time. Security Fix(es): * booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server (CVE-2024-3049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms booth-1.1-1.el8_10.1.aarch64.rpm 28ea1411493f79b6daf5af0a329bc9541700a72a2c5d041b760409fd7356bb49 booth-arbitrator-1.1-1.el8_10.1.noarch.rpm 682b82af4350f9645ab5dbe3851f372ea0b36923f5eee26330097e5a69cf9de6 booth-arbitrator-1.1-1.el8_10.1.noarch.rpm 682b82af4350f9645ab5dbe3851f372ea0b36923f5eee26330097e5a69cf9de6 booth-core-1.1-1.el8_10.1.aarch64.rpm 99bf00c87e0b55cfbb6c8484a6edd50c73743a435d782639d1d4a7248b350465 booth-site-1.1-1.el8_10.1.noarch.rpm bb50d5f23970b63e457e065b12b0137b1692816ce2d5744d6e3eeb645a43ed28 booth-site-1.1-1.el8_10.1.noarch.rpm bb50d5f23970b63e457e065b12b0137b1692816ce2d5744d6e3eeb645a43ed28 booth-test-1.1-1.el8_10.1.noarch.rpm afe6b462d734c9175a6012f50350cabc524e9ac710bf10d14dcdc159d75391f1 booth-test-1.1-1.el8_10.1.noarch.rpm afe6b462d734c9175a6012f50350cabc524e9ac710bf10d14dcdc159d75391f1 RLBA-2024:4225 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es): * db2: fix OCF_SUCESS name in db2_notify (Rocky Linux-32828) * [RFE] aws-vpc-move-ip: add retry mechanism to get EC2_INSTANCE_ID [rhel-8.10.z] (Rocky Linux-34137) none-resilientstorage-rpms resource-agents-4.9.0-54.el8_10.1.aarch64.rpm f88b3935c7a778412d48532a935ecdb45b3436f0268e9320bcc1791a586affef resource-agents-paf-4.9.0-54.el8_10.1.aarch64.rpm 207030de06163fd95fd9eb383c85a45799571611b403bcac4562f90ca258d34c RLSA-2024:6670 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.2.aarch64.rpm f8dc9ea4e81677c1e3df4c0eac12c7e8287ff1d2f279b637416536c3888fa25e pcs-snmp-0.10.18-2.el8_10.2.aarch64.rpm 9dbe97f8940646a8c20e37b98b6f83108b74792ad43436991302fa4387f207bc RLBA-2025:0779 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es): * The "openstack-cinder-volume" resource agent's start operation can report "started" before it's actually ready to provide storage [rhel-8.10.z] (JIRA:Rocky Linux-72956) none-resilientstorage-rpms resource-agents-paf-4.9.0-54.el8_10.8.aarch64.rpm 2ea001ad48150be754167eeb16b3b0ecc1669df64b1c77ce876ef3cbb353a8f5 resource-agents-4.9.0-54.el8_10.8.aarch64.rpm dbdf2b8a148d7a43a5ef1c08c086a60c0a2458411a3e979fbcddb30df31a3018 RLSA-2024:10987 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header (CVE-2024-21510) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.3.aarch64.rpm 2b26a695631aba7bb4befbdbd951bb08b47ef4123ee82d419524e9b0551a146c pcs-snmp-0.10.18-2.el8_10.3.aarch64.rpm f1855c9307777ce620dc41b496e21265df03e6a5217345ceee0bf2d34370512f RLBA-2024:8872 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * nfsserver fails to stop when `nfsv4_only=true` [rhel-8.10.z] (JIRA:Rocky Linux-61138) none-resilientstorage-rpms resource-agents-4.9.0-54.el8_10.5.aarch64.rpm dd516510e1b8416f016fa3147aa0db838e04816496d5ff890906a4444a9eb43b resource-agents-paf-4.9.0-54.el8_10.5.aarch64.rpm d5dd2024746d348c6a382f598b029de1cc7ad21691f4774c6fd0985e7f7d19ba RLBA-2024:11204 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es) and Enhancement(s): * Filesystem: fix to avoid killing unrelated processes [rhel-8.10.z] (JIRA:Rocky Linux-69297) none-resilientstorage-rpms resource-agents-4.9.0-54.el8_10.6.aarch64.rpm 5250374653009788a299a3eb6981c2fc85b8d88acbadfc5b79aaab3dc3e590ed resource-agents-paf-4.9.0-54.el8_10.6.aarch64.rpm 5d4fc8db7f296168735221c2eb7857a52c64b9abfceca348facf00e774ecd180 RLSA-2024:2952 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section. none-resilientstorage-rpms resource-agents-4.9.0-54.el8.aarch64.rpm 32a6f26b49fd7495fb6cf26e1877e93f3af77a14f206e06d0d35fdaac013c184 resource-agents-paf-4.9.0-54.el8.aarch64.rpm 4f18cd6220b2d18682fceca52101bffd36545efbe2e0437300d90dccb1440dae RLBA-2024:2954 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for booth. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section. none-resilientstorage-rpms booth-1.1-1.el8.aarch64.rpm b6baebb65f49db8ed560bb78edfccf9281b2a848080a1dadb798b478ce76bf1b booth-arbitrator-1.1-1.el8.noarch.rpm 6978db21aa523d8a44123ca5368c629b08e87bdb035a070dab06e7d06d3774c4 booth-arbitrator-1.1-1.el8.noarch.rpm 6978db21aa523d8a44123ca5368c629b08e87bdb035a070dab06e7d06d3774c4 booth-core-1.1-1.el8.aarch64.rpm 39862ced09e48e81e7a25db91c00c09e04b44e1d8e368acedd95985b5c726439 booth-site-1.1-1.el8.noarch.rpm 5982bf4a914d8dfd04323da991ccdbc28cd917548c371e56c658f71854791cc3 booth-site-1.1-1.el8.noarch.rpm 5982bf4a914d8dfd04323da991ccdbc28cd917548c371e56c658f71854791cc3 booth-test-1.1-1.el8.noarch.rpm 9c387866327e8d7dd6882e961d7970f6399ff3e4f7a13ec82839f902d1a25a67 booth-test-1.1-1.el8.noarch.rpm 9c387866327e8d7dd6882e961d7970f6399ff3e4f7a13ec82839f902d1a25a67 RLSA-2024:5338 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Low

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.1.aarch64.rpm 3acfa41a6c0a9ca81cbb747bc9f2010b3b0f692994208eaa4a3e1e150aa94a2f pcs-snmp-0.10.18-2.el8_10.1.aarch64.rpm a75c89009620e0658c1018056b0dc43f5a8526bb4c7c5bb4be92754b3e493d25 RLSA-2024:6311 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms resource-agents-4.9.0-54.el8_10.4.aarch64.rpm db3d27b6b07b9aad00c24244204d20e331c5a5565b141f6d8714ae208469ffd2 resource-agents-paf-4.9.0-54.el8_10.4.aarch64.rpm 63ee14b31ac83a5b47ab2aa27d714058f4f591c462bd03ef04a0e336aa3e2ae8 RLBA-2025:2613 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 None

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Bug Fix(es): * portblock: fix iptables version detection [rhel-8.10.z] (JIRA:Rocky Linux-79823) none-resilientstorage-rpms resource-agents-4.9.0-54.el8_10.10.aarch64.rpm b6730648dd42af41d78aabcb79f60cb41aa9fb93c8eee649994ab86e15261153 resource-agents-paf-4.9.0-54.el8_10.10.aarch64.rpm 8ef5d637a4e1363bf40869488743dd841257026f56439f7b824a79c39cf7a185 RLSA-2025:2872 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Important

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * python-tornado: Tornado has HTTP cookie parsing DoS vulnerability (CVE-2024-52804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.4.aarch64.rpm 337b5d75e3dbf0473d9790e51cbfb47781d3a827a143ad619c4df8805e0a58e0 pcs-snmp-0.10.18-2.el8_10.4.aarch64.rpm 6f400464fc7b697a1f84cdb30fa837fb07cb9f48ae5b4bd3148baa6b66c74732 RLSA-2025:19719 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Important

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters (CVE-2025-59830) * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770) * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory exhaustion) (CVE-2025-61771) * rack: Rack memory exhaustion denial of service (CVE-2025-61772) * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion (CVE-2025-61919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.7.aarch64.rpm b5eec3119342365de6018674c463d7507f5717297007c6adf5cc83930a006d01 pcs-snmp-0.10.18-2.el8_10.7.aarch64.rpm c832908a11004cadb6fa19aa63e9da21c42bced2cc878f1510dd462eed631490 RLSA-2025:8254 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Important

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727) * tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.5.aarch64.rpm 21c3eb0bb15114055c8de3584639214d42e44ca18040d69e1489a939af852fbb pcs-snmp-0.10.18-2.el8_10.5.aarch64.rpm 19b8c63a294c1036a37de9f68b12ace2a82a82e04f7d4bea839371634efae15a RLSA-2025:11047 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rexml: REXML ReDoS vulnerability (CVE-2024-49761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms pcs-0.10.18-2.el8_10.6.aarch64.rpm f6c2df10d916a40c5b087c5c65d64125c20bb044b9dbac99e67932be49eed49c pcs-snmp-0.10.18-2.el8_10.6.aarch64.rpm afcc27f9ac6c1038799613f9836964e5dc2aa680835d6baa043b4121044dced9 RLSA-2025:14999 Copyright 2026 Rocky Enterprise Software Foundation Rocky Linux 8 1 Moderate

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. none-resilientstorage-rpms resource-agents-4.9.0-54.el8_10.16.aarch64.rpm d9711a034a30229db5e6035a7c569a7c63ba8f3e61288c3ec9f91710ab9d11f4 resource-agents-paf-4.9.0-54.el8_10.16.aarch64.rpm f773e178149f1ea757824e1a5bdb1c62a5303d4397f9d4411e39fe08b5f22b1f