openSUSE Tumbleweed — pacemaker — multiple vulnerabilities (7 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2010-2496 CVE-2018-16877 CVE-2020-25654 CVE-2015-1867 CVE-2016-7035 CVE-2016-7797 CVE-2019-3885 Upstream summary: stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers […]