Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21196-1

Опубликовано: 29 июн. 2026
Источник: suse-cvrf

Описание

Security update for pacemaker

This update for pacemaker fixes the following issues:

  • CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).

Список пакетов

openSUSE Leap 16.0
pacemaker-3.0.0+20250218.64cd85422c-160000.4.1
pacemaker-cli-3.0.0+20250218.64cd85422c-160000.4.1
pacemaker-cts-3.0.0+20250218.64cd85422c-160000.4.1
pacemaker-devel-3.0.0+20250218.64cd85422c-160000.4.1
pacemaker-libs-3.0.0+20250218.64cd85422c-160000.4.1
pacemaker-remote-3.0.0+20250218.64cd85422c-160000.4.1
pacemaker-schemas-3.0.0+20250218.64cd85422c-160000.4.1
python3-pacemaker-3.0.0+20250218.64cd85422c-160000.4.1

Ссылки

Описание

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Затронутые продукты
openSUSE Leap 16.0:pacemaker-3.0.0+20250218.64cd85422c-160000.4.1
openSUSE Leap 16.0:pacemaker-cli-3.0.0+20250218.64cd85422c-160000.4.1
openSUSE Leap 16.0:pacemaker-cts-3.0.0+20250218.64cd85422c-160000.4.1
openSUSE Leap 16.0:pacemaker-devel-3.0.0+20250218.64cd85422c-160000.4.1
Ссылки