{"id":"ALSA-2026:39322","summary":"Important: pacemaker security update","details":"The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.   \n\nSecurity Fix(es):  \n\n  * pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-07-15T12:00:04.914101297Z","published":"2026-07-14T00:00:00Z","related":["CVE-2026-10649"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:39322"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-10649"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2462817"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-39322.html"}],"affected":[{"package":{"name":"pacemaker","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-cli","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-cluster-libs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-cluster-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-cts","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-cts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-doc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-libs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-libs-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-libs-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-nagios-plugins-metadata","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-nagios-plugins-metadata"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-remote","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-remote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"pacemaker-schemas","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pacemaker-schemas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}},{"package":{"name":"python3-pacemaker","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/python3-pacemaker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-5.6.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:39322.json"}}],"schema_version":"1.7.5"}