RHSA-2026:41043: Red Hat Packer DoS via Integer Overflow (CVE-2026-10649) Advisory

Vulnerability Overview Vulnerability Name: RHSA-2026:41043 - Security Advisory Publish Date: 2026-07-16 Update Date: 2026-07-16 Type/Severity: Security Advisory, Important Description: Packer Cluster Resource Manager is a collection of technologies that provide application integration and application availability in the event of failures. Security Fix: Packer: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) Affected Products Affected Products: - Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.4 ppc64le - Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.4 x86_64 - Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.4 aarch64 - Red Hat Enterprise Linux High Availability for IBM Z Systems - 4 years of updates 9.4 s390x - Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates 9.4 ppc64le - Red Hat Enterprise Linux Resilient Storage for IBM Z Systems - 4 years of updates 9.4 s390x - Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle 9.4 aarch64 - Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle 9.4 ppc64le - Red Hat Enterprise Linux High Availability for IBM Z Systems - Extended Life Cycle 9.4 s390x - Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle 9.4 x86_64 - Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle 9.4 ppc64le - Red Hat Enterprise Linux Resilient Storage for IBM Z Systems - Extended Life Cycle 9.4 s390x - Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle 9.4 x86_64 Remediation Remediation: Apply the provided updates, including the changes described in the security advisory. Reference Link: https://access.redhat.com/articles/11758 CVEs CVE-2026-10649: Packer: Denial of Service via integer overflow in remote message decompression References https://access.redhat.com/security/updates/classification#important Note More versions of these packages may be available. Click on the package name for more information. Detailed List of Affected Products Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions 9.4: - - - - - - - - - Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions 9.4: - - - - - - - - - Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux High Availability for IBM Z Systems - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates 9.4: - - - - - - - - - Red Hat Enterprise Linux Resilient Storage for IBM Z Systems - 4 years of updates 9.4: - - - - - - - - - Summary This security advisory covers multiple Red Hat Enterprise Linux products, with the primary issue being an integer overflow vulnerability in the Packer Cluster Resource Manager that could lead to a Denial of Service (DoS) attack. Users are advised to apply the provided updates as soon as possible to remediate this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2026:41043: Red Hat Packer DoS via Integer Overflow (CVE-2026-10649) Advisory