Red Hat Product Errata RHSA-2026:43606 - Security Advisory Issued: 2026-07-22 Updated: 2026-07-22 RHSA-2026:43606 - Security Advisory Overview Updated Packages Synopsis Important: pacemaker security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pacemaker is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux High Availability for IBM Power, little endian - Extended Life Cycle Support 7 ppc64le Red Hat Enterprise Linux Resilient Storage for IBM Power, little endian - Extended Life Cycle Support 7 ppc64le Fixes BZ - 2462817 - CVE-2026-10649 pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVEs CVE-2026-10649 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Support 7 SRPM pacemaker-1.1.23-1.el7_9.2.src.rpm SHA-256: 2b77b7fa3597b267d6190738a1b16cc6e47d59acc0ba7179c6c3e4f12568ccfe x86_64 pacemaker-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: e2817fa87b96ac7d0c986486f52180295fbddd02801f9c3d9c0a5efa9cb8a530 pacemaker-cli-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: c8cdb792618dbb68eece393a1d4df0c854e6f67095b1c3034efe1f39625cdb72 pacemaker-cluster-libs-1.1.23-1.el7_9.2.i686.rpm SHA-256: 71e01c9dd103686bac2d85861ea2499e23da4a80fd8f06ffc3aec93247b81608 pacemaker-cluster-libs-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: e44a4fa5228c89b113075b4926de4dbdfc54847391adf41153c0b51d49ec8077 pacemaker-cts-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: ed0a4c2be249dc037c8e0eb61163209c0877376d9c69f616a0599616590e9793 pacemaker-debuginfo-1.1.23-1.el7_9.2.i686.rpm SHA-256: 90bfdc7a160d223056f7b26d77eef0fcfb848d6eb6d04a11ccc19aa763969b42 pacemaker-debuginfo-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 279b64651239752571d6abb6b3b9204bf6aa17185ae408015381f8513475425f pacemaker-doc-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 4d2b8a266eaf9b0e6ef3af77042f0c3da90c6b6b930780e40a3815a45fa0b792 pacemaker-libs-1.1.23-1.el7_9.2.i686.rpm SHA-256: a97bea356b1e2440d589d38c3e8db53a08fb06cabd1c7a94792b7a98b7ca0dd3 pacemaker-libs-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 5180e680524767e7c9a8ac236092537b0d0373146c0d8e61e557f52c8c8d78c4 pacemaker-libs-devel-1.1.23-1.el7_9.2.i686.rpm SHA-256: c240a8f1df9814410e2df7265695c412ae76f94e2aee642f741b41ec0910c65f pacemaker-libs-devel-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: ec88601348ec46ce4d546ad84475d2b365b587e98de315a056708d6aee46860b pacemaker-nagios-plugins-metadata-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: c0e5fc152b69e42064d6d255670a28cbf20fbd727549259d2f276f55a70e0dfa pacemaker-remote-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 49e5a3a883f4647a228ae900fc902085c71abf61e574c36238a02bd10a46ffe6 Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle Support 7 SRPM pacemaker-1.1.23-1.el7_9.2.src.rpm SHA-256: 2b77b7fa3597b267d6190738a1b16cc6e47d59acc0ba7179c6c3e4f12568ccfe x86_64 pacemaker-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: e2817fa87b96ac7d0c986486f52180295fbddd02801f9c3d9c0a5efa9cb8a530 pacemaker-cli-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: c8cdb792618dbb68eece393a1d4df0c854e6f67095b1c3034efe1f39625cdb72 pacemaker-cluster-libs-1.1.23-1.el7_9.2.i686.rpm SHA-256: 71e01c9dd103686bac2d85861ea2499e23da4a80fd8f06ffc3aec93247b81608 pacemaker-cluster-libs-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: e44a4fa5228c89b113075b4926de4dbdfc54847391adf41153c0b51d49ec8077 pacemaker-cts-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: ed0a4c2be249dc037c8e0eb61163209c0877376d9c69f616a0599616590e9793 pacemaker-debuginfo-1.1.23-1.el7_9.2.i686.rpm SHA-256: 90bfdc7a160d223056f7b26d77eef0fcfb848d6eb6d04a11ccc19aa763969b42 pacemaker-debuginfo-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 279b64651239752571d6abb6b3b9204bf6aa17185ae408015381f8513475425f pacemaker-doc-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 4d2b8a266eaf9b0e6ef3af77042f0c3da90c6b6b930780e40a3815a45fa0b792 pacemaker-libs-1.1.23-1.el7_9.2.i686.rpm SHA-256: a97bea356b1e2440d589d38c3e8db53a08fb06cabd1c7a94792b7a98b7ca0dd3 pacemaker-libs-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 5180e680524767e7c9a8ac236092537b0d0373146c0d8e61e557f52c8c8d78c4 pacemaker-libs-devel-1.1.23-1.el7_9.2.i686.rpm SHA-256: c240a8f1df9814410e2df7265695c412ae76f94e2aee642f741b41ec0910c65f pacemaker-libs-devel-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: ec88601348ec46ce4d546ad84475d2b365b587e98de315a056708d6aee46860b pacemaker-nagios-plugins-metadata-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: c0e5fc152b69e42064d6d255670a28cbf20fbd727549259d2f276f55a70e0dfa pacemaker-remote-1.1.23-1.el7_9.2.x86_64.rpm SHA-256: 49e5a3a883f4647a228ae900fc902085c71abf61e574c36238a02bd10a46ffe6 Red Hat Enterprise Linux High Availability for IBM Power, little endian - Extended Life Cycle Support 7 SRPM pacemaker-1.1.23-1.el7_9.2.src.rpm SHA-256: 2b77b7fa3597b267d6190738a1b16cc6e47d59acc0ba7179c6c3e4f12568ccfe ppc64le pacemaker-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 7743bb2fcc9541d51e008a68cb04e684a627ec140c50b967f934cedbac80291b pacemaker-cli-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: ea0fffdd55cbab04704460e43a85e6ad926b4bf6def60094995d32d1e4479bfb pacemaker-cluster-libs-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: fe363608938bbb6e964bdba1f85a775f8a6f409f7b39d2ca9ca6c59bccb55264 pacemaker-cts-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 0781ff1be0656afe4b39ffa7da7f244bc148e9459c8f3e1724aaf1649f89f90b pacemaker-debuginfo-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 0b8a15cf2044342d0229860931777c58a1a061c4076019a1c17d33ed5b8d7d42 pacemaker-doc-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 6e57ce3e18bc1eb043cdc425c8b755854798b5c4dab154aa1fd98e47171b3949 pacemaker-libs-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: cc9abff76443497581e713333c439b669a16a9864680e1c4465d3044365785e1 pacemaker-libs-devel-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 04ac99481454169e7407748802fdae7ea85d42f4639e49e6ed06a97bb8a3f033 pacemaker-nagios-plugins-metadata-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 8e0df7271ef82289b9c7889da3c5fba30af2d6dd88cdfb0bbf418797ca84be38 pacemaker-remote-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 2e47fbc0c277070921947409754f10ae63f949bb9720259564f1a59e730b93c0 Red Hat Enterprise Linux Resilient Storage for IBM Power, little endian - Extended Life Cycle Support 7 SRPM pacemaker-1.1.23-1.el7_9.2.src.rpm SHA-256: 2b77b7fa3597b267d6190738a1b16cc6e47d59acc0ba7179c6c3e4f12568ccfe ppc64le pacemaker-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 7743bb2fcc9541d51e008a68cb04e684a627ec140c50b967f934cedbac80291b pacemaker-cli-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: ea0fffdd55cbab04704460e43a85e6ad926b4bf6def60094995d32d1e4479bfb pacemaker-cluster-libs-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: fe363608938bbb6e964bdba1f85a775f8a6f409f7b39d2ca9ca6c59bccb55264 pacemaker-cts-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 0781ff1be0656afe4b39ffa7da7f244bc148e9459c8f3e1724aaf1649f89f90b pacemaker-debuginfo-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 0b8a15cf2044342d0229860931777c58a1a061c4076019a1c17d33ed5b8d7d42 pacemaker-doc-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 6e57ce3e18bc1eb043cdc425c8b755854798b5c4dab154aa1fd98e47171b3949 pacemaker-libs-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: cc9abff76443497581e713333c439b669a16a9864680e1c4465d3044365785e1 pacemaker-libs-devel-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 04ac99481454169e7407748802fdae7ea85d42f4639e49e6ed06a97bb8a3f033 pacemaker-nagios-plugins-metadata-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 8e0df7271ef82289b9c7889da3c5fba30af2d6dd88cdfb0bbf418797ca84be38 pacemaker-remote-1.1.23-1.el7_9.2.ppc64le.rpm SHA-256: 2e47fbc0c277070921947409754f10ae63f949bb9720259564f1a59e730b93c0 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .