Register | Log in

pacemaker

cluster resource manager

Choose email to subscribe with

general

source: pacemaker (main)
version: 3.0.3-2
maintainer: Debian HA Maintainers (archive) (DMD)
uploaders: Adrian Vondendriesch [DMD] – Ferenc Wágner [DMD]
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.5-2
oldstable: 2.1.5-1+deb12u1
stable: 3.0.0-2
testing: 3.0.1-1.1
unstable: 3.0.3-2

versioned links

2.0.5-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.5-1+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.1-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.3-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libcib54
libcrmcluster53
libcrmcommon68
libcrmservice53
liblrmd52
libpacemaker30
libpe-rules51
libpe-status56
libstonithd56
pacemaker (1 bugs: 0, 1, 0, 0)
pacemaker-cli-utils
pacemaker-common
pacemaker-cts
pacemaker-dev
pacemaker-doc
pacemaker-remote
pacemaker-resource-agents
python3-pacemaker

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-10649: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Created: 2026-06-16 Last update: 2026-10-21 18:30

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-10649: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Created: 2026-06-16 Last update: 2026-10-21 18:30

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-10649: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Created: 2026-06-16 Last update: 2026-10-21 18:30

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2026-10649: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Created: 2026-06-16 Last update: 2026-08-02 20:32

Depends on packages which need a new maintainer normal

The packages that pacemaker depends on which need a new maintainer are:

docbook-xsl (#802370)
- Build-Depends: docbook-xsl

Created: 2023-09-01 Last update: 2026-10-24 15:30

2 open merge requests in Salsa normal

There are 2 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-10-01 Last update: 2026-10-20 22:03

debian/patches: 9 patches to forward upstream low

Among the 9 debian patches available in version 3.0.3-2 of the package, we noticed the following issues:

9 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-10-22 00:02

testing migrations

excuses:
- Migration status for pacemaker (3.0.1-1.1 to 3.0.3-2): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Autopkgtest for booth/1.2-4: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), armhf: Regression ♻ (reference ♻), i386: Reference test triggered, but real test failed already ♻, ppc64el: Regression ♻ (reference ♻), riscv64: Regression ♻ (reference ♻), s390x: Regression ♻ (reference ♻)
- ∙ ∙ Autopkgtest for crmsh/5.1.0-3: amd64: Regression ♻ (reference ♻), arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Autopkgtest for pacemaker/3.0.3-2: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Too young, only 3 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/p/pacemaker.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[2026-10-21] Accepted pacemaker 3.0.3-2 (source) into unstable (Ferenc Wágner)
[2026-10-20] Accepted pacemaker 3.0.3-1 (source) into unstable (Ferenc Wágner)
[2026-01-09] pacemaker 3.0.1-1.1 MIGRATED to testing (Debian testing watch)
[2026-01-07] Accepted pacemaker 3.0.1-1.1 (source) into unstable (Adrian Bunk)
[2025-08-19] pacemaker 3.0.1-1 MIGRATED to testing (Debian testing watch)
[2025-08-16] Accepted pacemaker 3.0.1-1 (source) into unstable (Ferenc Wágner)
[2025-04-09] pacemaker 3.0.0-2 MIGRATED to testing (Debian testing watch)
[2025-03-14] Accepted pacemaker 3.0.0-2 (source) into unstable (Ferenc Wágner)
[2025-03-13] Accepted pacemaker 3.0.0-1 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Ferenc Wágner)
[2024-08-20] pacemaker 2.1.8-1 MIGRATED to testing (Debian testing watch)
[2024-08-17] Accepted pacemaker 2.1.8-1 (source) into unstable (Ferenc Wágner)
[2024-07-23] pacemaker 2.1.8~rc4-1 MIGRATED to testing (Debian testing watch)
[2024-07-20] Accepted pacemaker 2.1.8~rc4-1 (source) into unstable (Ferenc Wágner)
[2024-07-10] pacemaker 2.1.8~rc3-1 MIGRATED to testing (Debian testing watch)
[2024-07-07] Accepted pacemaker 2.1.8~rc3-1 (source) into unstable (Ferenc Wágner)
[2024-06-03] pacemaker 2.1.8~rc1-1 MIGRATED to testing (Debian testing watch)
[2024-05-31] Accepted pacemaker 2.1.8~rc1-1 (source) into unstable (Ferenc Wágner)
[2024-05-03] pacemaker 2.1.7-1 MIGRATED to testing (Debian testing watch)
[2024-03-31] Accepted pacemaker 2.1.7-1 (source) into unstable (Ferenc Wágner)
[2024-03-22] Accepted pacemaker 2.1.6-5 (source) into unstable (Ferenc Wágner)
[2024-02-29] Accepted pacemaker 2.1.6-4.1 (source) into unstable (Benjamin Drung)
[2024-02-05] Accepted pacemaker 2.1.6-4.1~exp1 (source) into experimental (Lucas Kanashiro)
[2023-10-01] pacemaker 2.1.6-4 MIGRATED to testing (Debian testing watch)
[2023-09-29] Accepted pacemaker 2.1.6-4 (source) into unstable (Ferenc Wágner)
[2023-09-28] Accepted pacemaker 2.1.6-3 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Ferenc Wágner)
[2023-09-25] Accepted pacemaker 2.1.6-2 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Ferenc Wágner)
[2023-07-12] Accepted pacemaker 2.1.5-1+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Ferenc Wágner)
[2023-07-09] pacemaker 2.1.6-1 MIGRATED to testing (Debian testing watch)
[2023-07-05] Accepted pacemaker 2.1.6-1 (source) into unstable (Ferenc Wágner)
[2023-01-25] pacemaker 2.1.5-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 3
RC: 0
I&N: 2
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
l10n (-, 43)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.0.1-1.1ubuntu1
3 bugs
patches for 3.0.1-1.1ubuntu1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing