An integer overflow vulnerability (CVE-2026-10649, CVSS 8.6 HIGH) in the Pacemaker cluster resource manager allows remote attackers to cause a denial of service via crafted message decompression. The security update addresses this flaw for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Extended Update Support Long-Life Add-On. Administrators should apply the provided pacemaker package updates, such as version 2.1.2-4.el8_6.11, to affected systems.
Red Hat Product Errata RHSA-2026:42076 - Security Advisory Issued: 2026-07-20 Updated: 2026-07-20 RHSA-2026:42076 - Security Advisory Overview Updated Packages Synopsis Important: pacemaker security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pacemaker is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Long Life 8.6 x86_64 Fixes BZ - 2462817 - CVE-2026-10649 pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVEs CVE-2026-10649 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 SRPM pacemaker-2.1.2-4.el8_6.11.src.rpm SHA-256: b4d2d3f5004884f9d8f2aacacefef961f3eb1bfbab423c5e19ba85a8c0b17f77 x86_64 pacemaker-cli-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 03da21e91cd9114c39391468140ea42d69608b45aa8b85371d4c76197905fed2 pacemaker-cli-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 502bc2437ac089f1934ac5e138c307eccb7579d196f758bd99c3ce3c30214ecb pacemaker-cluster-libs-2.1.2-4.el8_6.11.i686.rpm SHA-256: 7f14fcae963ac913cf59d1e6c09de4f0ef536e42a494ae420abd1b906e247f00 pacemaker-cluster-libs-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 4980f36459a0c0bf35c6d6bd735fa9ece7f6039db9815bc9cdb20e068f7bf3f1 pacemaker-cluster-libs-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 37a87fd8bc3fc227d54269f9b11743f60b4cc432de124062e746da70a69c26c8 pacemaker-cluster-libs-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: a1fbb1d6b28cbc7c9d3e1f90d46c2aacb49204aa30b072b53f20a5a5217ff1c9 pacemaker-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 0246de7d39c9ea8e8903e9a4829fb90c64db5177be9f7f7232defe53e5697ce9 pacemaker-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 5ab988953b428f51847f505b69168a64a05c15280e5e5e1a538fbf1a0edb731b pacemaker-debugsource-2.1.2-4.el8_6.11.i686.rpm SHA-256: 6096cf79f0bf60059bb9459ca4834f35404485690190a98a9488dc881c46587a pacemaker-debugsource-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 65c8425fca9f2b00a0f9409ba4750658b0797b52a19e69768081631d297db0fc pacemaker-libs-2.1.2-4.el8_6.11.i686.rpm SHA-256: 7b57d569786ef452c2f82241ef78e4fb7bdeaca16c24abb8e52504a6c99fba99 pacemaker-libs-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 3aad91c2f626e0a658a8d283ba1fa3122a5c1089041765323e8ccc53ef866cda pacemaker-libs-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: d1c4dcb75273c0dae8833f3c64ce3d82a1801822625cbafbe15f08e1c5403ceb pacemaker-libs-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 71dd0ea4249d07c95ce79e2ecb96fd73e6fc41c029b0acdcc2b98d13fadcfce6 pacemaker-remote-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 6c66dccead6c952c9de3cfec954ade0110acfcee556f7f719b09450e7966cda0 pacemaker-remote-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 416ccec2e89418952389bc9e5adb68fa30f83b525220884e200598a6209e5b49 pacemaker-schemas-2.1.2-4.el8_6.11.noarch.rpm SHA-256: a00bc268f5cf204d2793a3b6df0941d9e6d09a080de96a027f830acd7207e083 Red Hat Enterprise Linux Server - AUS 8.6 SRPM pacemaker-2.1.2-4.el8_6.11.src.rpm SHA-256: b4d2d3f5004884f9d8f2aacacefef961f3eb1bfbab423c5e19ba85a8c0b17f77 x86_64 pacemaker-cli-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 03da21e91cd9114c39391468140ea42d69608b45aa8b85371d4c76197905fed2 pacemaker-cli-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 502bc2437ac089f1934ac5e138c307eccb7579d196f758bd99c3ce3c30214ecb pacemaker-cluster-libs-2.1.2-4.el8_6.11.i686.rpm SHA-256: 7f14fcae963ac913cf59d1e6c09de4f0ef536e42a494ae420abd1b906e247f00 pacemaker-cluster-libs-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 4980f36459a0c0bf35c6d6bd735fa9ece7f6039db9815bc9cdb20e068f7bf3f1 pacemaker-cluster-libs-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 37a87fd8bc3fc227d54269f9b11743f60b4cc432de124062e746da70a69c26c8 pacemaker-cluster-libs-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: a1fbb1d6b28cbc7c9d3e1f90d46c2aacb49204aa30b072b53f20a5a5217ff1c9 pacemaker-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 0246de7d39c9ea8e8903e9a4829fb90c64db5177be9f7f7232defe53e5697ce9 pacemaker-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 5ab988953b428f51847f505b69168a64a05c15280e5e5e1a538fbf1a0edb731b pacemaker-debugsource-2.1.2-4.el8_6.11.i686.rpm SHA-256: 6096cf79f0bf60059bb9459ca4834f35404485690190a98a9488dc881c46587a pacemaker-debugsource-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 65c8425fca9f2b00a0f9409ba4750658b0797b52a19e69768081631d297db0fc pacemaker-libs-2.1.2-4.el8_6.11.i686.rpm SHA-256: 7b57d569786ef452c2f82241ef78e4fb7bdeaca16c24abb8e52504a6c99fba99 pacemaker-libs-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 3aad91c2f626e0a658a8d283ba1fa3122a5c1089041765323e8ccc53ef866cda pacemaker-libs-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: d1c4dcb75273c0dae8833f3c64ce3d82a1801822625cbafbe15f08e1c5403ceb pacemaker-libs-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 71dd0ea4249d07c95ce79e2ecb96fd73e6fc41c029b0acdcc2b98d13fadcfce6 pacemaker-remote-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 6c66dccead6c952c9de3cfec954ade0110acfcee556f7f719b09450e7966cda0 pacemaker-remote-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 416ccec2e89418952389bc9e5adb68fa30f83b525220884e200598a6209e5b49 pacemaker-schemas-2.1.2-4.el8_6.11.noarch.rpm SHA-256: a00bc268f5cf204d2793a3b6df0941d9e6d09a080de96a027f830acd7207e083 Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Long Life 8.6 SRPM x86_64 pacemaker-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: f40658ef24692ccb5df5b4c0aef372472fce3453b0eaa8d478ee6ed816bca859 pacemaker-cli-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: e3d1733f192a3f1d4e864ad583e701847e20d34b937c475b2192596d2f4b318f pacemaker-cli-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 03da21e91cd9114c39391468140ea42d69608b45aa8b85371d4c76197905fed2 pacemaker-cli-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 502bc2437ac089f1934ac5e138c307eccb7579d196f758bd99c3ce3c30214ecb pacemaker-cluster-libs-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 37a87fd8bc3fc227d54269f9b11743f60b4cc432de124062e746da70a69c26c8 pacemaker-cluster-libs-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: a1fbb1d6b28cbc7c9d3e1f90d46c2aacb49204aa30b072b53f20a5a5217ff1c9 pacemaker-cts-2.1.2-4.el8_6.11.noarch.rpm SHA-256: 18e1c98c3a823593c21d5259cb372e7c6a779b61303c2244e35cde177bfa4018 pacemaker-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 0246de7d39c9ea8e8903e9a4829fb90c64db5177be9f7f7232defe53e5697ce9 pacemaker-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 5ab988953b428f51847f505b69168a64a05c15280e5e5e1a538fbf1a0edb731b pacemaker-debugsource-2.1.2-4.el8_6.11.i686.rpm SHA-256: 6096cf79f0bf60059bb9459ca4834f35404485690190a98a9488dc881c46587a pacemaker-debugsource-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 65c8425fca9f2b00a0f9409ba4750658b0797b52a19e69768081631d297db0fc pacemaker-doc-2.1.2-4.el8_6.11.noarch.rpm SHA-256: 5a04234545016c026245b4fc45f834432670f934dc87cce29787ade9affc4950 pacemaker-libs-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: d1c4dcb75273c0dae8833f3c64ce3d82a1801822625cbafbe15f08e1c5403ceb pacemaker-libs-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 71dd0ea4249d07c95ce79e2ecb96fd73e6fc41c029b0acdcc2b98d13fadcfce6 pacemaker-libs-devel-2.1.2-4.el8_6.11.i686.rpm SHA-256: 556dc5be3df43fa01b2634dec86e7b60d1e8c111c6f122a6e90418b0ad1a6e64 pacemaker-libs-devel-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: cc8f2312296dd1263d88f0e219aebde8b95c05beff6d9903022fe67577744a8f pacemaker-nagios-plugins-metadata-2.1.2-4.el8_6.11.noarch.rpm SHA-256: c18f2840f3ce66e964c1214b2d4ab8f10079517fe8c94d3be7979834e6657165 pacemaker-remote-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: cceae8cd81edc55eb2fb0e8b7c642e9a3abbcd3d0a31b0aad45ac6ea522ea6f5 pacemaker-remote-debuginfo-2.1.2-4.el8_6.11.i686.rpm SHA-256: 6c66dccead6c952c9de3cfec954ade0110acfcee556f7f719b09450e7966cda0 pacemaker-remote-debuginfo-2.1.2-4.el8_6.11.x86_64.rpm SHA-256: 416ccec2e89418952389bc9e5adb68fa30f83b525220884e200598a6209e5b49 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .