Red Hat Product Errata RHSA-2026:39322 - Security Advisory Issued: 2026-07-14 Updated: 2026-07-14 RHSA-2026:39322 - Security Advisory Overview Updated Packages Synopsis Important: pacemaker security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pacemaker is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux High Availability for x86_64 8 x86_64 Red Hat Enterprise Linux High Availability for ARM 64 8 aarch64 Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux Resilient Storage for x86_64 8 x86_64 Red Hat Enterprise Linux Resilient Storage for IBM z Systems 8 s390x Red Hat Enterprise Linux High Availability for IBM z Systems 8 s390x Red Hat Enterprise Linux Resilient Storage for Power, little endian 8 ppc64le Red Hat Enterprise Linux High Availability for Power, little endian 8 ppc64le Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle 8.10 s390x Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle 8.10 s390x Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2462817 - CVE-2026-10649 pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVEs CVE-2026-10649 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM pacemaker-2.1.7-5.6.el8_10.src.rpm SHA-256: 8d4688dc6ea7f0efbecd830b5d09fb34d8b415e8ad93db48c26fde75ca8c9dfe x86_64 pacemaker-cli-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: 5b6d54a5c5792043b7dc133aa8478f8cb04626d92602a182c27ac49825cf3430 pacemaker-cli-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: fdb18fc843f6b4b2acbbc4f75dbb5ca26b4c0e2887202a4ce8ea8ab1e62a04fc pacemaker-cluster-libs-2.1.7-5.6.el8_10.i686.rpm SHA-256: 3d0ccb2e54093039d905ea0cae3098d114160a2a40666b3f3ea594ee09dd75f7 pacemaker-cluster-libs-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 80d3f2f092f63c2879a4149f5256789010e34e2ed4d73ec52c5b605ca76a65b5 pacemaker-cluster-libs-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: aea7ec44ae3ec3ab0be0978c1c9ed3dd75b2885a1e869d219a65f54d73ba8146 pacemaker-cluster-libs-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 54394d2dc336780799e9694c9158cbd18ccd098f3f401d571f1f0a0c4a4700b7 pacemaker-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: 43f2829a862d054763b2f257799cd617610459fa18ca289775c3bd470014a7bd pacemaker-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 157befc75d4642774535ae7cce9ce8642aab8519930f009b3aaa96a4e52bab5f pacemaker-debugsource-2.1.7-5.6.el8_10.i686.rpm SHA-256: 761ca151bd2109b58bbd5977494fcbdb5c7577af9ad2d4e820ae43b73eb62698 pacemaker-debugsource-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: c6f4c3e80bd2ce29c8e86117b3e5ba0009caa7ca51bf056acfcf576cb5b3e540 pacemaker-libs-2.1.7-5.6.el8_10.i686.rpm SHA-256: cdda3a2152f5fd84a08e82d246657d224fd704ae40348044f42bdab2a8243ff2 pacemaker-libs-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 4e1387a21021c4424f5e27e22a67e24b672bc7013d86cfc8ce778407625207be pacemaker-libs-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: bba85a9394b61d6b8ec715df3b9167ba96fb7acab95cf9bc9bac3201de757e40 pacemaker-libs-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 8ae484380bd7a7eb7939d35be64862672a6e767306ed1afeee7ea7aa99e35339 pacemaker-remote-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: 838fd0f9aa064db88564756b37ee4fb93fd31d4d6d43f7aa17e9b1ee15bbba2a pacemaker-remote-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: daaf718021a282644a554e43aece2cfefc866b879af286f641e76ae7ce95c97c pacemaker-schemas-2.1.7-5.6.el8_10.noarch.rpm SHA-256: 22af556d240075ffabb05dc53dd4bf412f8a0f535436424971f1a4afe1a92cec Red Hat Enterprise Linux for IBM z Systems 8 SRPM pacemaker-2.1.7-5.6.el8_10.src.rpm SHA-256: 8d4688dc6ea7f0efbecd830b5d09fb34d8b415e8ad93db48c26fde75ca8c9dfe s390x pacemaker-cli-debuginfo-2.1.7-5.6.el8_10.s390x.rpm SHA-256: fe047fc18d50db7c65cddb12ec2ec9e91eea84a8b29646b031d4e60ca3a31a66 pacemaker-cluster-libs-2.1.7-5.6.el8_10.s390x.rpm SHA-256: dd6a1a629dcbec72a7ce913b9a594a439293ad6dd3918d3d5ce2f5af2c7f5d83 pacemaker-cluster-libs-debuginfo-2.1.7-5.6.el8_10.s390x.rpm SHA-256: 7738d28e854d8489248ce8c6435bc98489a2ea4b2bc8ae4c33a8c80f77fe878f pacemaker-debuginfo-2.1.7-5.6.el8_10.s390x.rpm SHA-256: c3c8ac048836c12e99ad727d29d8b5c3d781ec46d09bf38e5f454f5ac0bce454 pacemaker-debugsource-2.1.7-5.6.el8_10.s390x.rpm SHA-256: 37b75b1bad41a1fa597d596b5b4992d92d820c08af426dcf8e7516d68866d355 pacemaker-libs-2.1.7-5.6.el8_10.s390x.rpm SHA-256: 27e4ad35ca35c916bf2eec5a0bcccd6634543552bcec136315a847362727c6ad pacemaker-libs-debuginfo-2.1.7-5.6.el8_10.s390x.rpm SHA-256: a458cdb7bebd64125b0f147df58f6ba5594dedf94f8e76769e802a61b6fd9243 pacemaker-remote-debuginfo-2.1.7-5.6.el8_10.s390x.rpm SHA-256: bc9c197274153f53b322a916573b0c4aa60fbf06c90efd72ce52091d45e42b18 pacemaker-schemas-2.1.7-5.6.el8_10.noarch.rpm SHA-256: 22af556d240075ffabb05dc53dd4bf412f8a0f535436424971f1a4afe1a92cec Red Hat Enterprise Linux for Power, little endian 8 SRPM pacemaker-2.1.7-5.6.el8_10.src.rpm SHA-256: 8d4688dc6ea7f0efbecd830b5d09fb34d8b415e8ad93db48c26fde75ca8c9dfe ppc64le pacemaker-cli-debuginfo-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: 30a39c95e959cc89aba84e07b0f9d73af4cf58b4d83e81f17752cf1c9dc99f5b pacemaker-cluster-libs-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: 9a7748c0d1064857bd7a530dd4591968503547d6a7d7cf680d2ef733e7eb2209 pacemaker-cluster-libs-debuginfo-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: 6944cf2ac0e1d1c3b25acf296b317fd5147a907add34d5f862bde32ca4d67277 pacemaker-debuginfo-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: 9259c14213de7621d0a16d012af242dd99f15db9e44f6df3abb097f47e151e44 pacemaker-debugsource-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: bd7426b37f1fd3a12f078178049ad4cd1306f1ab61f839f5b416878d1f285b38 pacemaker-libs-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: 2a31f7dbe8bc8c7f76316da9f8fd208c4d73b65552cec201d8743d17cc30b7f5 pacemaker-libs-debuginfo-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: c47e89639e6f4d5455fb4f1f5e351652e91599ebc648ec253f7635fd06e4d841 pacemaker-remote-debuginfo-2.1.7-5.6.el8_10.ppc64le.rpm SHA-256: 94c8a6f02348da3eb72dcb3d9f10c7ae718827d3ab326d77928b370bd85e435d pacemaker-schemas-2.1.7-5.6.el8_10.noarch.rpm SHA-256: 22af556d240075ffabb05dc53dd4bf412f8a0f535436424971f1a4afe1a92cec Red Hat Enterprise Linux High Availability for x86_64 8 SRPM x86_64 pacemaker-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 41f41940094141f0ec5b9cb16d7c268ca6a74f3f1aa02173eb0f89effa58b5d2 pacemaker-cli-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: c1aa57cb6c979c0217ed35acaca10d3b8f053ce4fded192bdc45bc4d648598b7 pacemaker-cli-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: 5b6d54a5c5792043b7dc133aa8478f8cb04626d92602a182c27ac49825cf3430 pacemaker-cli-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: fdb18fc843f6b4b2acbbc4f75dbb5ca26b4c0e2887202a4ce8ea8ab1e62a04fc pacemaker-cluster-libs-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: aea7ec44ae3ec3ab0be0978c1c9ed3dd75b2885a1e869d219a65f54d73ba8146 pacemaker-cluster-libs-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 54394d2dc336780799e9694c9158cbd18ccd098f3f401d571f1f0a0c4a4700b7 pacemaker-cts-2.1.7-5.6.el8_10.noarch.rpm SHA-256: 990a77eb32c3e3961b1c3b2c2f8dbe75c6a0c5884fec9435689d25b09561e1df pacemaker-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: 43f2829a862d054763b2f257799cd617610459fa18ca289775c3bd470014a7bd pacemaker-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 157befc75d4642774535ae7cce9ce8642aab8519930f009b3aaa96a4e52bab5f pacemaker-debugsource-2.1.7-5.6.el8_10.i686.rpm SHA-256: 761ca151bd2109b58bbd5977494fcbdb5c7577af9ad2d4e820ae43b73eb62698 pacemaker-debugsource-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: c6f4c3e80bd2ce29c8e86117b3e5ba0009caa7ca51bf056acfcf576cb5b3e540 pacemaker-doc-2.1.7-5.6.el8_10.noarch.rpm SHA-256: d2b7f7566e8377af53f293b7c54360ffc35331546af78f89fd45889f7574670a pacemaker-libs-debuginfo-2.1.7-5.6.el8_10.i686.rpm SHA-256: bba85a9394b61d6b8ec715df3b9167ba96fb7acab95cf9bc9bac3201de757e40 pacemaker-libs-debuginfo-2.1.7-5.6.el8_10.x86_64.rpm SHA-256: 8ae484380bd7a7eb7939d35be64862672a6e767306ed1afeee7ea7
An integer overflow vulnerability (CVE-2026-10649, CVSS 8.6 HIGH) in the Pacemaker cluster resource manager allows remote attackers to cause a denial of service via crafted messages that trigger the flaw during remote message decompression. The security update addresses this issue for Pacemaker on Red Hat Enterprise Linux 8 and its High Availability and Resilient Storage variants.