[Git][security-tracker-team/security-tracker][master] Track fix for CVE-2026-10649/pacemaker via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 20 16:31:45 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
448b7638 by Salvatore Bonaccorso at 2026-10-20T17:31:09+02:00
Track fix for CVE-2026-10649/pacemaker via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -147087,7 +147087,7 @@ CVE-2026-46448 (In OpenStack Nova before 33.0.2, the server create API does not
NOTE: https://www.openwall.com/lists/oss-security/2026/06/16/5
NOTE: https://launchpad.net/bugs/2151252
CVE-2026-10649 (A flaw was found in Pacemaker. An unauthenticated remote attacker can ...)
- - pacemaker <unfixed> (bug #1140188)
+ - pacemaker 3.0.3-1 (bug #1140188)
NOTE: https://www.openwall.com/lists/oss-security/2026/06/16/6
NOTE: https://github.com/clusterLabs/pacemaker/pull/4128
NOTE: Fixed by: https://github.com/ClusterLabs/pacemaker/commit/8e667ef87ac4bc66ab8c64599334b521655925f7
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/448b76385573e9cfcff644566ac89a8ea3b1838a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/448b76385573e9cfcff644566ac89a8ea3b1838a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/dee7bdc9/attachment.htm>
More information about the debian-security-tracker-commits
mailing list