Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2970-1

Опубликовано: 14 июл. 2026
Источник: suse-cvrf

Описание

Security update for pacemaker

This update for pacemaker fixes the following issues:

  • CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).

Список пакетов

SUSE Linux Enterprise High Availability Extension 12 SP5
libpacemaker3-1.1.24+20210811.f5abda0ee-3.52.1
pacemaker-1.1.24+20210811.f5abda0ee-3.52.1
pacemaker-cli-1.1.24+20210811.f5abda0ee-3.52.1
pacemaker-cts-1.1.24+20210811.f5abda0ee-3.52.1
pacemaker-remote-1.1.24+20210811.f5abda0ee-3.52.1
SUSE Linux Enterprise Server 12 SP5-LTSS
libpacemaker-devel-1.1.24+20210811.f5abda0ee-3.52.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libpacemaker-devel-1.1.24+20210811.f5abda0ee-3.52.1

Ссылки

Описание

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 12 SP5:libpacemaker3-1.1.24+20210811.f5abda0ee-3.52.1
SUSE Linux Enterprise High Availability Extension 12 SP5:pacemaker-1.1.24+20210811.f5abda0ee-3.52.1
SUSE Linux Enterprise High Availability Extension 12 SP5:pacemaker-cli-1.1.24+20210811.f5abda0ee-3.52.1
SUSE Linux Enterprise High Availability Extension 12 SP5:pacemaker-cts-1.1.24+20210811.f5abda0ee-3.52.1
Ссылки
Уязвимость SUSE-SU-2026:2970-1