Fedora alert FEDORA-2026-6a4bfb1309 (pacemaker)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: pacemaker-3.0.2-3.fc43 | |
| Date: | Sat, 27 Jun 2026 00:56:52 +0000 | |
| Message-ID: | <20260627005652.6B4C7838E9@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6a4bfb1309 2026-06-27 00:54:50.049690+00:00 -------------------------------------------------------------------------------- Name : pacemaker Product : Fedora 43 Version : 3.0.2 Release : 3.fc43 URL : https://www.clusterlabs.org/ Summary : Scalable High-Availability cluster resource manager Description : Pacemaker is an advanced, scalable High-Availability cluster resource manager. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be configured to periodically check resource health. Available rpmbuild rebuild options: --with(out) : cibsecrets hardening linuxha nls pre_release profiling -------------------------------------------------------------------------------- Update Information: * Wed Jun 17 2026 Klaus Wenninger <klaus.wenninger@aon.at> - 3.0.2-3 - fix CVE-2026-10649: Fix integer overflows in remote message code -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 17 2026 Klaus Wenninger <klaus.wenninger@aon.at> - 3.0.2-3 - fix CVE-2026-10649: Fix integer overflows in remote message code -------------------------------------------------------------------------------- References: [ 1 ] Bug #2489310 - CVE-2026-10649 pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2489310 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6a4bfb1309' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new