Red Hat Enterprise Linux Webpack Security Regression Vulnerability in PCS Package

A security regression vulnerability has been identified in the PCS package of Red Hat Enterprise Linux 9.2. This issue arises because an update for the PCS package in the 9.2 release failed to include a crucial fix for a Webpack vulnerability (CVE-2023-28154) that had been addressed in the 9.1 release. As a result, users who update to Red Hat Enterprise Linux 9.2 may encounter this vulnerability, even though it was properly fixed in the previous version.

Impact

Exploitation of this vulnerability reintroduces the Webpack issue CVE-2023-28154, which could have security implications depending on the specific context of its use.

Remediation

Users can apply the available update for this vulnerability by referring to the Red Hat Enterprise Linux 9.2 advisory RHSA-2023:2652.