openEuler-SA-2026-2990

Synopsis:

pacemaker security updateSummary:

An update for pacemaker is now available for openEuler-20.03-LTS-SP4Description:

Pacemaker is an advanced, scalable High-Availability cluster resource manager.

Security Fix(es):

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.(CVE-2026-10649)Topic:

An update for pacemaker is now available for openEuler-20.03-LTS-SP4.

openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:

HighAffected Component:

pacemaker