Release date:
2026-10-21 22:49:17 UTC
Description:
- CVE-2025-30472: stack buffer overflow in orf_token_endian_convert()
- CVE-2026-35091: out-of-bounds read via check_memb_commit_token_sanity()
- CVE-2026-35092: integer overflow in check_memb_join_sanity()
- CVE-2026-81665: heap buffer overflow in totempg_deliver_fn()
Updated packages:
-
corosync-3.1.5-1.el8.tuxcare.els1.x86_64.rpm
sha:f6458a77676d572fa04e039fb4d9af68120e949000d44d4e813a7c4d4ef77355
-
corosync-vqsim-3.1.5-1.el8.tuxcare.els1.x86_64.rpm
sha:a56e8ae351d98bcb56eb72ec573b9ad1c2ffb8431aa51aa5471041401a9d2d9a
-
corosynclib-3.1.5-1.el8.tuxcare.els1.x86_64.rpm
sha:c26a60d025bb0b49903a53df3e81feb56408df4e07352329b3a8ec9c200c87f7
-
corosynclib-devel-3.1.5-1.el8.tuxcare.els1.x86_64.rpm
sha:b74f4b83b23ade8f995e613ddd0a340982b643b2ed763712a150fbbcdd53f548
-
spausedd-3.1.5-1.el8.tuxcare.els1.x86_64.rpm
sha:ec2e7909b8044780f1ab18707760288ae7c302d62998e35776bd49350710d455
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
