SUSE-SU-2026:2970-1

Details

Description of the patch:

This update for pacemaker fixes the following issues:

CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression (bsc#1268381).

Affected Packages

libpacemaker3

SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

1.1.24+20210811.f5abda0ee-3.52.1

pacemaker

SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

1.1.24+20210811.f5abda0ee-3.52.1

pacemaker-cli

SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

1.1.24+20210811.f5abda0ee-3.52.1

pacemaker-cts

SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

1.1.24+20210811.f5abda0ee-3.52.1

pacemaker-remote

SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

1.1.24+20210811.f5abda0ee-3.52.1

libpacemaker-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.24+20210811.f5abda0ee-3.52.1

References