[CLSA-2026:1793105177] corosync: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-27 14:37:47 UTC
Description:
- CVE-2025-30472: fix stack-based buffer overflow in orf_token endian conversion - CVE-2026-35091: fix missing error return in memb_commit_token sanity check - CVE-2026-35092: fix integer overflow in memb_join sanity check - CVE-2026-81665: fix buffer overflow in totempg message reassembly
Updated packages:
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.aarch64.rpm
    sha:3b8288d7c176ef0330cf5433fafd4c3fd186d6d7f9921fc4902aa08f4e5bb1ea
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:f6120550c01571c3df853b4fd9d4ac62cde068b38871ee8d459e41dd8113d481
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:d164e87d78c353b0708a52472d881e96e9d4129f2f0f48ac3300096d40a52174
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.aarch64.rpm
    sha:9557da44c947b52c408232326071fbbe00d9e0570aee7384729938c024aa312b
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:c7a526f9dc3b98833517be07d699d279c40d4639b25468fd0357b65e5fe9f2b1
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:056e0dbcb70241c16abb3c5304cba5af6be334e81b1f4cd048de86a3ddcda906
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.aarch64.rpm
    sha:4a760fc4914b0da23f2ade3502a0aad78d3ce9e3fbbc2773f59d491a0b16918c
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:332b0aff362fa83a12f5fbc26534b2d8ee2dbf8b99758e69b7ae9a93dfc7b139
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:a87fd149bd3d79b978981b3248f8d8ec45878f5a723063fb45228f3535ec2699
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.aarch64.rpm
    sha:4126f359ae4c9be2129d84f61bd2ab7654fb4a8b45902e63167775ac7a18842c
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:b6ce5ea7b007877be2760dd99faf77f4d1d469dc5eb531a704abac22fc4f6ca3
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:d1f2ca64ad2c855cf450430a09438d1c5bdb30adf705a2d592783e425ecad1c6
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.aarch64.rpm
    sha:6c9420eb1c3545906c895876028b680ee2c2bbcc34ce9bc158eb0a3c5ea7a87f
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:59af79464bce20e2a6bb99b4c61da111e99816611d72d087791ac31247083296
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:5b347eb92f575cded7d743c5220e616275306c2d42bfda0e13a6c4f83117082b
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.aarch64.rpm
    sha:062315c032abbdc46367feb038e310e9e63de4e40651b8c4111d5a0ca0353d69
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:136c439a8c4a1c5056844390fd21f12c6165bb8146d7641b4352d80de6b68d8c
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:bc12f57798489267e744477fd1e718b01403d9e5e90ec4dd27186b72027ff722
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.