Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2716-1

Опубликовано: 30 июн. 2026
Источник: suse-cvrf

Описание

Security update for pacemaker

This update for pacemaker fixes the following issue

  • CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).

Список пакетов

Image SLES15-SP6-SAP-BYOS
pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-BYOS-EC2
pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-Hardened-BYOS
pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-Hardened-EC2
pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
SUSE Linux Enterprise High Availability Extension 15 SP6
pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-cts-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-devel-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-remote-2.1.7+20231219.0f7f88312-150600.6.15.1
pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
python3-pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1

Ссылки

Описание

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Затронутые продукты
Image SLES15-SP6-SAP-BYOS-EC2:pacemaker-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-BYOS-EC2:pacemaker-cli-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-BYOS-EC2:pacemaker-libs-2.1.7+20231219.0f7f88312-150600.6.15.1
Image SLES15-SP6-SAP-BYOS-EC2:pacemaker-schemas-2.1.7+20231219.0f7f88312-150600.6.15.1
Ссылки