[CLSA-2026:1790352190] corosync: Fix of CVE-2026-81665
Type:
security
Severity:
Important
Release date:
2026-09-25 16:03:21 UTC
Description:
- CVE-2026-81665: fix out-of-bounds write in totempg_deliver_fn by replacing an assert, compiled out in release builds, with a runtime bounds check
CVEs fixed:
Updated packages:
  • corosync-3.1.7-1.el9.tuxcare.els3.aarch64.rpm
    sha:f36232fa6b59739070a4a4ac1ecdc052f5f0fb95f9d12ac1a2c76b4cccb1fc46
  • corosync-3.1.7-1.el9.tuxcare.els3.i686.rpm
    sha:0a33d3c83a50ae41d35b06f57e671091ef26d3f7b47c620d6ecc6054fd5a5b5d
  • corosync-3.1.7-1.el9.tuxcare.els3.x86_64.rpm
    sha:7365a44a4ebd3417842bfdeb4190388a3e8dad86e50b9ebff11476b0b8119b9e
  • corosync-vqsim-3.1.7-1.el9.tuxcare.els3.aarch64.rpm
    sha:e0b3bc6edc314f0f7d8057fd104910c5ce1466b89fb03fdcef9d417d6ea95959
  • corosync-vqsim-3.1.7-1.el9.tuxcare.els3.i686.rpm
    sha:5d8e86d7dd022ff9914bf9e1d539d3b1fdf74f09bbfba1f4907ba3648de3dafb
  • corosync-vqsim-3.1.7-1.el9.tuxcare.els3.x86_64.rpm
    sha:e60c4cfb1520e038fb725f4965d0694365ee8a0a1b82caac6d926fd28c39cbe4
  • corosynclib-3.1.7-1.el9.tuxcare.els3.aarch64.rpm
    sha:76bda1338c19f0a77d0ab71e286b682eb85d0d40c649eaf2c86d5bd8340fa461
  • corosynclib-3.1.7-1.el9.tuxcare.els3.i686.rpm
    sha:95c36f3ca70c81b808b1b4195667cc9192968244c6fd67f9af1c5cc0c3875bba
  • corosynclib-3.1.7-1.el9.tuxcare.els3.x86_64.rpm
    sha:9a7de7e5baa6d471f06303068b7dc39c37a83c95b91579a6e1acaaf09b894456
  • corosynclib-devel-3.1.7-1.el9.tuxcare.els3.aarch64.rpm
    sha:10155acb58159884194ffa9dd40102591c202e807c7f7f3d354d50ee2ef508f2
  • corosynclib-devel-3.1.7-1.el9.tuxcare.els3.i686.rpm
    sha:c3c73ea3c01b3118b6456c97abcb28a84f5d07dabe7aa1909aab7c63e4ddba0d
  • corosynclib-devel-3.1.7-1.el9.tuxcare.els3.x86_64.rpm
    sha:9bc83fa2f5c830fd2ac3c9675aa4148edb8cbb0315b803f26c19b4fbf0df553c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.