RHSA-2026:41043: Red Hat Packer DoS漏洞(CVE-2026-10649)修复公告

漏洞概述 漏洞名称: RHSA-2026:41043 - Security Advisory 发布日期: 2026-07-16 更新日期: 2026-07-16 类型/严重性: 安全公告，重要 描述: Packer集群资源管理器是一个集合技术，用于在事件失败时提供应用程序集成和应用程序可用性。 安全修复: Packer: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) 影响范围 受影响产品: - Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.4 ppc64le - Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.4 x86_64 - Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.4 aarch64 - Red Hat Enterprise Linux High Availability for IBM Z Systems - 4 years of updates 9.4 s390x - Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates 9.4 ppc64le - Red Hat Enterprise Linux Resilient Storage for IBM Z Systems - 4 years of updates 9.4 s390x - Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 9.4 aarch64 - Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 9.4 ppc64le - Red Hat Enterprise Linux High Availability for IBM Z Systems - Extended Life Cycle 9.4 s390x - Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 9.4 x86_64 - Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 9.4 ppc64le - Red Hat Enterprise Linux Resilient Storage for IBM Z Systems - Extended Life Cycle 9.4 s390x - Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 9.4 x86_64 修复方案 修复措施: 应用提供的更新，包括在安全公告中描述的更改。 参考链接: https://access.redhat.com/articles/11758 CVEs CVE-2026-10649: Packer: Denial of Service via integer overflow in remote message decompression References https://access.redhat.com/security/updates/classification#important 注意 更多版本的这些包可能可用。点击包名称以获取更多信息。 受影响产品的详细列表 Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.4: - - - - - - - - - Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.4: - - - - - - - - - Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux High Availability for IBM Z Systems - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux Resilient Storage for IBM Z Systems - 4 years of updates 9.4: - - - - - - - - - 总结 该安全公告涉及多个Red Hat Enterprise Linux产品，主要问题是Packer集群资源管理器中的整数溢出漏洞，可能导致拒绝服务攻击。建议用户尽快应用提供的更新以修复此漏洞。

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

RHSA-2026:41043: Red Hat Packer DoS漏洞(CVE-2026-10649)修复公告

目标达成感谢每一位支持者 — 我们达成了 100% 目标！