# CVE-2020-10663: pcs: The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.  Security Fix(...

CVE-2020-10663 is fixed in 37 products on 1 platform, first by RHSA-2020:2462, released June 10, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2020-10663
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0681
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 28, 2020

## Description

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.  Security Fix(es):  * rubygem-json: Unsafe Object Creation Vulnerability in JSON (CVE-2020-10663)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Bug Fix(es):  * pcs status on remotes is not working on rhel8.2 any longer (BZ#1832914)  * pcs cluster stop --all throws errors and doesn't seem to honor the request-timeout option (BZ#1838084)  * [GUI] Colocation constraint can't be added (BZ#1840158)

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libruby2.5 Ubuntu 18.04.6 LTS (bionic) | 2.5.1-1ubuntu1.8 | [libruby2.5 2.5.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libruby2.5-2.5.1-1ubuntu1.8.md) | Oct 6, 2020 |
| Linux | pcs RHEL 8 | 0:0.10.4-6.el8_2.1 | [RHSA-2020:2462](https://patchblox.com/security/data/fix/linux/rhsa-2020-2462.md) | Jun 10, 2020 |
| Linux | pcs ol 8 | 0:0.10.4-6.0.1.el8_2.1 | [ELSA-2020-5724](https://patchblox.com/security/data/fix/linux/elsa-2020-5724.md) | Jun 12, 2020 |
| Linux | pcs-snmp RHEL 8 | 0:0.10.4-6.el8_2.1 | [RHSA-2020:2462](https://patchblox.com/security/data/fix/linux/rhsa-2020-2462.md) | Jun 10, 2020 |
| Linux | ruby RHEL 8 | 0:2.6.7-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | ruby ol 8 | 0:2.6.7-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | ruby-devel RHEL 8 | 0:2.6.7-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | ruby-devel ol 8 | 0:2.6.7-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | ruby-doc RHEL 8 | 0:2.6.7-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | ruby-doc ol 8 | 0:2.6.7-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | ruby-irb RHEL 8 | 0:2.5.9-107.module+el8.4.0+10822+fe4fffb1 | [RHSA-2021:2587](https://patchblox.com/security/data/fix/linux/rhsa-2021-2587.md) | Jun 29, 2021 |
| Linux | ruby-irb ol 8 | 0:2.5.9-107.module+el8.4.0+20203+c00aa653 | [ELSA-2021-2587](https://patchblox.com/security/data/fix/linux/elsa-2021-2587.md) | Jul 2, 2021 |
| Linux | ruby-libs RHEL 8 | 0:2.6.7-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | ruby-libs ol 8 | 0:2.6.7-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | ruby2.5 Ubuntu 18.04.6 LTS (bionic) | 2.5.1-1ubuntu1.8 | [ruby2.5 2.5.1-1ubuntu1.8](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ruby2.5-2.5.1-1ubuntu1.8.md) | Oct 6, 2020 |
| Linux | rubygem-abrt RHEL 8 | 0:0.3.0-4.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-abrt ol 8 | 0:0.3.0-4.module+el8.1.0+5406+ce01f9b9 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-abrt-doc RHEL 8 | 0:0.3.0-4.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-abrt-doc ol 8 | 0:0.3.0-4.module+el8.1.0+5406+ce01f9b9 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-bigdecimal RHEL 8 | 0:1.4.1-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-bigdecimal ol 8 | 0:1.4.1-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-bson RHEL 8 | 0:4.5.0-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-bson ol 8 | 0:4.5.0-1.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-bson-doc RHEL 8 | 0:4.5.0-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-bson-doc ol 8 | 0:4.5.0-1.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-bundler RHEL 8 | 0:1.17.2-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-bundler ol 8 | 0:1.17.2-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-bundler-doc RHEL 8 | 0:1.16.1-3.module+el8.1.0+3656+f80bfa1d | [RHSA-2021:2587](https://patchblox.com/security/data/fix/linux/rhsa-2021-2587.md) | Jun 29, 2021 |
| Linux | rubygem-bundler-doc ol 8 | 0:1.16.1-3.module+el8.3.0+7756+e45777e9 | [ELSA-2021-2587](https://patchblox.com/security/data/fix/linux/elsa-2021-2587.md) | Jul 2, 2021 |
| Linux | rubygem-did_you_mean RHEL 8 | 0:1.3.0-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-did_you_mean ol 8 | 0:1.3.0-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-io-console RHEL 8 | 0:0.4.7-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-io-console ol 8 | 0:0.4.7-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-irb RHEL 8 | 0:1.0.0-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-irb ol 8 | 0:1.0.0-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-json RHEL 8 | 0:2.1.0-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-json ol 8 | 0:2.1.0-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-minitest RHEL 8 | 0:5.11.3-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-minitest ol 8 | 0:5.11.3-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-mongo RHEL 8 | 0:2.8.0-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-mongo ol 8 | 0:2.8.0-1.module+el8.1.0+5406+ce01f9b9 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-mongo-doc RHEL 8 | 0:2.8.0-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-mongo-doc ol 8 | 0:2.8.0-1.module+el8.1.0+5406+ce01f9b9 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-mysql2 RHEL 8 | 0:0.5.2-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-mysql2 ol 8 | 0:0.5.2-1.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-mysql2-doc RHEL 8 | 0:0.5.2-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-mysql2-doc ol 8 | 0:0.5.2-1.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-net-telnet RHEL 8 | 0:0.2.0-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-net-telnet ol 8 | 0:0.2.0-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-openssl RHEL 8 | 0:2.1.2-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-openssl ol 8 | 0:2.1.2-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-pg RHEL 8 | 0:1.1.4-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-pg ol 8 | 0:1.1.4-1.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-pg-doc RHEL 8 | 0:1.1.4-1.module+el8.1.0+3653+beb38eb0 | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-pg-doc ol 8 | 0:1.1.4-1.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-power_assert RHEL 8 | 0:1.1.3-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-power_assert ol 8 | 0:1.1.3-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-psych RHEL 8 | 0:3.1.0-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-psych ol 8 | 0:3.1.0-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-rake RHEL 8 | 0:12.3.3-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-rake ol 8 | 0:12.3.3-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-rdoc RHEL 8 | 0:6.1.2-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-rdoc ol 8 | 0:6.1.2-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-test-unit RHEL 8 | 0:3.2.9-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-test-unit ol 8 | 0:3.2.9-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygem-xmlrpc RHEL 8 | 0:0.3.0-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygem-xmlrpc ol 8 | 0:0.3.0-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygems RHEL 8 | 0:3.0.3.1-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygems ol 8 | 0:3.0.3.1-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |
| Linux | rubygems-devel RHEL 8 | 0:3.0.3.1-107.module+el8.4.0+10830+bbd85cce | [RHSA-2021:2588](https://patchblox.com/security/data/fix/linux/rhsa-2021-2588.md) | Jun 29, 2021 |
| Linux | rubygems-devel ol 8 | 0:3.0.3.1-107.module+el8.4.0+20235+1e5b8be3 | [ELSA-2021-2588](https://patchblox.com/security/data/fix/linux/elsa-2021-2588.md) | Jul 7, 2021 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.