Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2742-1

Опубликовано: 03 июл. 2026
Источник: suse-cvrf

Описание

Security update for pacemaker

This update for pacemaker fixes the following issue

  • CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP4
libpacemaker-devel-2.1.2+20211124.ada5c3b36-150400.4.39.1
libpacemaker3-2.1.2+20211124.ada5c3b36-150400.4.39.1
pacemaker-2.1.2+20211124.ada5c3b36-150400.4.39.1
pacemaker-cli-2.1.2+20211124.ada5c3b36-150400.4.39.1
pacemaker-cts-2.1.2+20211124.ada5c3b36-150400.4.39.1
pacemaker-remote-2.1.2+20211124.ada5c3b36-150400.4.39.1

Ссылки

Описание

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP4:libpacemaker-devel-2.1.2+20211124.ada5c3b36-150400.4.39.1
SUSE Linux Enterprise High Availability Extension 15 SP4:libpacemaker3-2.1.2+20211124.ada5c3b36-150400.4.39.1
SUSE Linux Enterprise High Availability Extension 15 SP4:pacemaker-2.1.2+20211124.ada5c3b36-150400.4.39.1
SUSE Linux Enterprise High Availability Extension 15 SP4:pacemaker-cli-2.1.2+20211124.ada5c3b36-150400.4.39.1
Ссылки