VDB
ALSA-2026%3A0930
ALSA-2026%3A0930
PUBLISHED
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * tornado: Tornado Quadratic DoS via Repeated Header Coalescing (CVE-2025-67725) * tornado: Tornado Quadratic DoS via Crafted Multipart Parameters (CVE-2025-67726) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | pcs | 0, 0 |
| AlmaLinux:8 | pcs-snmp | 0, 0 |
Timeline
- Jan 21, 2026 CVE Published
- Jan 24, 2026 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:0930 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-67725 third-party-advisory
- https://access.redhat.com/security/cve/CVE-2025-67726 third-party-advisory
- https://bugzilla.redhat.com/2421722 third-party-advisory
- https://bugzilla.redhat.com/2421733 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2026-0930.html vendor-advisory