[CLSA-2026:1792591710] corosync: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 14:08:44 UTC
Description:
- CVE-2025-30472: stack buffer overflow in orf_token_endian_convert() - CVE-2026-35091: out-of-bounds read via check_memb_commit_token_sanity() - CVE-2026-35092: integer overflow in check_memb_join_sanity() - CVE-2026-81665: heap buffer overflow in totempg_deliver_fn()
Updated packages:
  • corosync-3.1.0-3.el8_4.1.tuxcare.els1.x86_64.rpm
    sha:6f2948767f87076354f817d7dd33df384aa3b259d4936fdb455643a63dfb37ac
  • corosync-vqsim-3.1.0-3.el8_4.1.tuxcare.els1.x86_64.rpm
    sha:dc8a91cfa354678316cb88b97d0afa75e4a7a6cb0a2e38a9b13402c578135b8b
  • corosynclib-3.1.0-3.el8_4.1.tuxcare.els1.x86_64.rpm
    sha:b423f05d8c208c6591895c916ede133eac9951148b9deda8db1765a856bd30ac
  • corosynclib-devel-3.1.0-3.el8_4.1.tuxcare.els1.x86_64.rpm
    sha:d497009f246d8407ab02d4e711f258d9cf0670a0d9557501c4dfd2e01c8a6873
  • spausedd-3.1.0-3.el8_4.1.tuxcare.els1.x86_64.rpm
    sha:83d906d23f24967732a2d0265076593d62b0ff371d4f3ec57b3e34591742ef7d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.