The Webpack flaw CVE-2023-28154 (bug 2179227) for PCS package was addressed in Red Hat Enterprise Linux 9 via erratum RHSA-2023:1591, released on Apr 04, 2023: https://access.redhat.com/errata/RHSA-2023:1591 However, the fix for this issue was not included in the PCS updates released as part of Red Hat Enterprise Linux 9.2 GA erratum (RHBA-2023:2151), causing a security regression of previously released fix. A new CVE-ID CVE-2023-2319 was assigned for this security regression. Note that this issue and CVE-ID is specific to the PCS packages as shipped with Red Hat Enterprise Linux and is not applicable to any upstream PCS version or PCS packages of any other vendor that are not directly based on Red Hat Enterprise Linux packages. For more information about the original flaw, refer to the CVE page or bug linked above.
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:2652 https://access.redhat.com/errata/RHSA-2023:2652
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2023-2319