Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Pacemaker can crash handling remote messages
published 15 days ago
Summary
The Pacemaker components used in AlmaLinux (including pacemaker, pacemaker‑cli, pacemaker‑cluster‑libs, pacemaker‑cts, and pacemaker‑doc) may encounter a calculation error when they try to decompress data sent from another system, which can cause the software to stop working. This could disrupt cluster coordination and potentially bring services down. Apply the latest update from AlmaLinux that corrects the calculation error to keep the cluster running smoothly.
What to do
- Update almalinux pacemaker to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-cli to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-cluster-libs to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-cts to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-doc to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-libs to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-libs-devel to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-nagios-plugins-metadata to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-remote to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
- Update almalinux pacemaker-schemas to version 2.1.5-9.el9_2.3.alma.1.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-cli |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-cluster-libs |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-cts |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-doc |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-libs |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-libs-devel |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-nagios-plugins-metadata |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-remote |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | pacemaker-schemas |
< 2.1.5-9.el9_2.3.alma.1.tuxcare.els1 Fix: upgrade to 2.1.5-9.el9_2.3.alma.1.tuxcare.els1
|
Original advisory text
pacemaker: Fix of CVE-2026-10649
- CVE-2026-10649: integer overflows in remote message decompression
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792496879.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-10649 Vendor Advisory
Timeline
Published20 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1792496879 · OSV
Track software like this
Free during beta