Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 23 Mar 2017 15:57:01 +0100
From: Cedric Buissart <>
Subject: pcs: CVE-2017-2661 Improper node name field validation when creating
 clusters leads to XSS


The CVE-2017-2661 has been assigned to the following issue:

Reflected cross-site scripting vulnerability was found in pcs due to
improper validation of Node name field when creating new cluster or adding
existing cluster.

Upstream fix :
* web UI: fixed XSS vulnerability

Red Hat would like to thank Microsoft for reporting the vulnerability.

Cedric Buissart,
Product Security

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.