Red Hat Product Errata RHSA-2026:41043 - Security Advisory Issued: 2026-07-16 Updated: 2026-07-16 RHSA-2026:41043 - Security Advisory Overview Updated Packages Synopsis Important: pacemaker security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pacemaker is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux High Availability for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates 9.4 x86_64 Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates 9.4 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle 9.4 s390x Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle 9.4 s390x Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 9.4 x86_64 Fixes BZ - 2462817 - CVE-2026-10649 pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVEs CVE-2026-10649 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.4 SRPM pacemaker-2.1.7-5.5.el9_4.src.rpm SHA-256: eed7a09f4885fb60cc1e8e08343c6b5ba1c8d14975ef64f5457860411628a30b ppc64le pacemaker-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 61b7cec41e3d945243bc995c90e297672c212393272e0e4c7f9710e0f800d77c pacemaker-cli-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 06eb1d153d400f6c8d6d76854d29946391d75d7b48f993fa0f95b1747dbe4a3f pacemaker-cli-debuginfo-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: ed0cf209447b722dc28e794c93a57aaa359c374bf42d302f80869646be1d8192 pacemaker-cluster-libs-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 034fdccd75ad0369a736eddaffe0c588dd6c67b52ca60204e2f83d9b7168781c pacemaker-cluster-libs-debuginfo-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 65199c6206f8abf08787b9e589cfbf37508f43054fb02530b34efd22e510c8ed pacemaker-cts-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c3f886b9efe98b91dc2541486cf5f934bd2b06e2ea3b95b1876d485992e7d0ae pacemaker-debuginfo-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 5f7468a12e95bf6df3cc0a14117ded6df112a151278ac6b5681dda867d516469 pacemaker-debugsource-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: ecec7c150c9634492a87000dfca25f846f59fad84c39352a1851d192bd227a7a pacemaker-doc-2.1.7-5.5.el9_4.noarch.rpm SHA-256: 5fcc4758223df34c99376bc7fc0461eb5b77414a486253bab89119245f8dc2d8 pacemaker-libs-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 793b6cec556632b47bfe157b469cac039722c11ee6d52cbb4fc7d9e7895b81a4 pacemaker-libs-debuginfo-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 8cdeef81046f7796683c75bc8e0f597c2dc2bd4416a799616923742ff3faf591 pacemaker-libs-devel-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 2ae0ee4fd83bc6968163cdd51e46615909154e9e8d7cb3238c2906f39904adcb pacemaker-nagios-plugins-metadata-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c4a7d78ff714ab39eb042db033ad8f361fb3dfa2560c571fb2e236c271e4afb2 pacemaker-remote-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: 575e2f69ac4b77501666234092fe8f6abfa54c8e82e7743346fb6e65f5f7b5de pacemaker-remote-debuginfo-2.1.7-5.5.el9_4.ppc64le.rpm SHA-256: a69172629004113eeae85f2e0e40b24c4dbafd176263998adbf9a69f94681913 pacemaker-schemas-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c7c7f81b13ed0068a84180f215d5a14f63991ae812ee33ddb586c4acb04e0c98 python3-pacemaker-2.1.7-5.5.el9_4.noarch.rpm SHA-256: 6c81b5112157f1be5449257bd70198fecf536d8715d4ba7250a8e98e852df9f2 Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.4 SRPM pacemaker-2.1.7-5.5.el9_4.src.rpm SHA-256: eed7a09f4885fb60cc1e8e08343c6b5ba1c8d14975ef64f5457860411628a30b x86_64 pacemaker-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 8dac9cf154976ad58eb148f94975578a72cc1d7df4c557ebf9b50c6412dc92d8 pacemaker-cli-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: ba89cf3e6afbc9469d8c3540271ae8641ce01140f42f7e9cd0d87145c115d4d8 pacemaker-cli-debuginfo-2.1.7-5.5.el9_4.i686.rpm SHA-256: 2ae43565ca5c76c94b07e8ed12cf8304cae96bec1faf974f183f8ca47419eea9 pacemaker-cli-debuginfo-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 2a27560f05848669ebcc407f4224fcbc6e7fcdca375b4a01aeaf124e76fdbf9c pacemaker-cluster-libs-2.1.7-5.5.el9_4.i686.rpm SHA-256: d5f9992cb51ee622ebdee4bb63fe2a6ec0570b22112c0a56d39bdd5e4be59729 pacemaker-cluster-libs-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 62922b2916e173baa90b2650493dcc67490d6ae819daf939da11cc2ab8f50b91 pacemaker-cluster-libs-debuginfo-2.1.7-5.5.el9_4.i686.rpm SHA-256: 9b87f8528e31d429e7e170b98364725cc279ffb539e179f34991ca7806df84ae pacemaker-cluster-libs-debuginfo-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 3bc5e8eb0cc285d8a70f6a31a373e8fdd6485a87a5f93503c1599a03695f1b7c pacemaker-cts-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c3f886b9efe98b91dc2541486cf5f934bd2b06e2ea3b95b1876d485992e7d0ae pacemaker-debuginfo-2.1.7-5.5.el9_4.i686.rpm SHA-256: af1a501d9df65e901112841b37eee2b566e031cf6d1ee9304599c9d6baf62e65 pacemaker-debuginfo-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: e07885b2d96e8e8b7fa03b968c1a39aafe505e146c81956710727661359bb073 pacemaker-debugsource-2.1.7-5.5.el9_4.i686.rpm SHA-256: f46f7e0418425ddfbe4061a1af6809b55fa2d1a543a642a0287ace60eb71783f pacemaker-debugsource-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 6eb3951221fc06ed8af82652efa66ff52570f5f0dd9f53f6d4970f4ff4c05c10 pacemaker-doc-2.1.7-5.5.el9_4.noarch.rpm SHA-256: 5fcc4758223df34c99376bc7fc0461eb5b77414a486253bab89119245f8dc2d8 pacemaker-libs-2.1.7-5.5.el9_4.i686.rpm SHA-256: b8604d8a423fba5645b8165528660006c94d77feb2b01c1dc0a592c1b252f79a pacemaker-libs-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: ce862a0ea80e5ff6ae45275ed7d798a9e4f7d5da78e353be45a7f5d1d6764fc3 pacemaker-libs-debuginfo-2.1.7-5.5.el9_4.i686.rpm SHA-256: d67d075ced1989580f29f7f93a94d522af488cdc486c63648778cf26c92a95ab pacemaker-libs-debuginfo-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 500ae0e1d904f02b2a1367451a2819e811d2c6f6a7126643e7e729184da2dc27 pacemaker-libs-devel-2.1.7-5.5.el9_4.i686.rpm SHA-256: d7a249309c594aec7279c0a7da49353cf36735dde19faa14497c3953c86c3050 pacemaker-libs-devel-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 4d6ad2ea85cf091c89372dbdf1db97c3dca64e94bfd7d16cbc4e2f5a1f0afa3b pacemaker-nagios-plugins-metadata-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c4a7d78ff714ab39eb042db033ad8f361fb3dfa2560c571fb2e236c271e4afb2 pacemaker-remote-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: 1c4f5ae2a5a508765a4b053cbd22404f76e1b95632443800d415201413d3dfd5 pacemaker-remote-debuginfo-2.1.7-5.5.el9_4.i686.rpm SHA-256: b09fb7b1fa236263534b701ecdb63d5800e98903df51d26702defd9d576284b0 pacemaker-remote-debuginfo-2.1.7-5.5.el9_4.x86_64.rpm SHA-256: d5e21b73492d348571d7f9fed529dad7d2fdff6a940da9166eec929e96a64c44 pacemaker-schemas-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c7c7f81b13ed0068a84180f215d5a14f63991ae812ee33ddb586c4acb04e0c98 python3-pacemaker-2.1.7-5.5.el9_4.noarch.rpm SHA-256: 6c81b5112157f1be5449257bd70198fecf536d8715d4ba7250a8e98e852df9f2 Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.4 SRPM pacemaker-2.1.7-5.5.el9_4.src.rpm SHA-256: eed7a09f4885fb60cc1e8e08343c6b5ba1c8d14975ef64f5457860411628a30b aarch64 pacemaker-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: a22d7c8785f5536c8a9cabdd12713c9ef19c9273fe624bf400ce91c8b70b3577 pacemaker-cli-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: f762b37a2569e81ca4b3fa6a4302b8f7f3c1ca729d2af2fa0fd2e4225e5f1683 pacemaker-cli-debuginfo-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: bcbaf5fffdc6a5da49e8eca8d2f26c0f3b0ea7dfd1df674fb1913b525580ce16 pacemaker-cluster-libs-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: 9f05ea0a0c9f12f651eab17d6f9952bfbc221406a1b5a032508d75d021fcf5d4 pacemaker-cluster-libs-debuginfo-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: b153fb95fcdc0e6e15c0281253ba6dbc2923396c1744c72b83ae276ac8e1794f pacemaker-cts-2.1.7-5.5.el9_4.noarch.rpm SHA-256: c3f886b9efe98b91dc2541486cf5f934bd2b06e2ea3b95b1876d485992e7d0ae pacemaker-debuginfo-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: 6ddbf715b0c8802e48a6a2cd6c44c80fa8ff16f5e00e00326821d6fcd97a544c pacemaker-debugsource-2.1.7-5.5.el9_4.aarch64.rpm SHA-256: 494c596dc7707b0da10f6d255efe5bace4ed245bb4e7458afb788d940dde7008 pacemaker-doc-2.1.7-5.5.el9_4.noarch.rpm SHA-256: 5fcc4758223df34c99376bc7fc0461eb
An integer overflow vulnerability (CVE-2026-10649, CVSS 8.6 HIGH) in the Pacemaker cluster resource manager allows for remote denial of service via crafted message decompression. This security update addresses the flaw for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions across multiple architectures. Administrators should apply the update using the referenced Red Hat solution article to remediate affected systems.