[Git][security-tracker-team/security-tracker][master] Track fix for CVE-2026-10649/pacemaker via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 20 16:31:45 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
448b7638 by Salvatore Bonaccorso at 2026-10-20T17:31:09+02:00
Track fix for CVE-2026-10649/pacemaker via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -147087,7 +147087,7 @@ CVE-2026-46448 (In OpenStack Nova before 33.0.2, the server create API does not
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/16/5
 	NOTE: https://launchpad.net/bugs/2151252
 CVE-2026-10649 (A flaw was found in Pacemaker. An unauthenticated remote attacker can  ...)
-	- pacemaker <unfixed> (bug #1140188)
+	- pacemaker 3.0.3-1 (bug #1140188)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/16/6
 	NOTE: https://github.com/clusterLabs/pacemaker/pull/4128
 	NOTE: Fixed by: https://github.com/ClusterLabs/pacemaker/commit/8e667ef87ac4bc66ab8c64599334b521655925f7



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/448b76385573e9cfcff644566ac89a8ea3b1838a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/448b76385573e9cfcff644566ac89a8ea3b1838a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/dee7bdc9/attachment.htm>


More information about the debian-security-tracker-commits mailing list