Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Pacemaker could let attackers stop services

published 3 months ago

Summary

The Pacemaker component used on Red Hat systems to keep services running can be targeted by attackers if it is not updated. This could lead to interruptions or loss of control over important business applications. Install the latest Red Hat security update for Pacemaker right away and keep your systems regularly patched.

What to do

Update redhat pacemaker to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-cli-debuginfo to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-cluster-libs to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-cluster-libs-debuginfo to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-debuginfo to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-debugsource to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-libs to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-libs-debuginfo to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-remote-debuginfo to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-schemas to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-cli to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-cts to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-doc to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-libs-devel to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-nagios-plugins-metadata to version 0:2.1.2-4.el8_6.11.
Update redhat pacemaker-remote to version 0:2.1.2-4.el8_6.11.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-cli-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-cluster-libs	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-cluster-libs-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-debugsource	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-libs	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-libs-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-remote-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_aus:8.6::appstream	redhat	pacemaker-schemas	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-cli-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-cluster-libs	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-cluster-libs-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-debugsource	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-libs	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-libs-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-remote-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	pacemaker-schemas	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-cli	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-cli-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-cluster-libs-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-cts	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-debugsource	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-doc	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-libs-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-libs-devel	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-nagios-plugins-metadata	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-remote	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11
Red Hat:rhel_eus_long_life:8.6::highavailability	redhat	pacemaker-remote-debuginfo	< 0:2.1.2-4.el8_6.11 Fix: upgrade to 0:2.1.2-4.el8_6.11

Original advisory text

Red Hat Security Advisory: pacemaker security update

References

https://access.redhat.com/errata/RHSA-2026:42076 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2462817 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42076.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-10649 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-10649 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-10649 Vendor Advisory
https://github.com/clusterLabs/pacemaker/pull/4128 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.6 High

Timeline

Published23 Jul 2026

Updated22 Aug 2026

First seen22 Aug 2026

Sources

RHSA-2026:42076 · OSV

Track software like this

Free during beta