[CLSA-2026:1793105236] corosync: Fix of CVE-2025-30472
Type:
security
Severity:
Critical
Release date:
2026-10-28 18:19:37 UTC
Description:
- CVE-2025-30472: fix stack-based buffer overflow in orf_token endian conversion - CVE-2026-35091: fix missing error return in memb_commit_token sanity check - CVE-2026-35092: fix integer overflow in memb_join sanity check - CVE-2026-81665: fix buffer overflow in totempg message reassembly
CVEs fixed:
Updated packages:
  • corosync-2.4.5-7.el7.2.tuxcare.els1.i686.rpm
    sha:19652f0e354fc189b0d679f616eb7e218d5a20605d55a20653fd6dd4cc85b312
  • corosync-2.4.5-7.el7.2.tuxcare.els1.x86_64.rpm
    sha:5eb70a54ac14a6c76bea3016492e961f817cdbb1399fd05d78a9cc0e3f84e8fd
  • corosync-qdevice-2.4.5-7.el7.2.tuxcare.els1.i686.rpm
    sha:7abeba049785a713a67d93405756dbec02c30848cb292184e97a17ff1fe71024
  • corosync-qdevice-2.4.5-7.el7.2.tuxcare.els1.x86_64.rpm
    sha:45ae4f35d2ff9fd22cacdd08ee77d9d3e9c0e03a7d56b3bf3942927cdd5ba8fe
  • corosync-qnetd-2.4.5-7.el7.2.tuxcare.els1.i686.rpm
    sha:5c641d8cf96aee1620bbf46782c2dd5052fb6bf35c660ff0e9403ab837cc10f9
  • corosync-qnetd-2.4.5-7.el7.2.tuxcare.els1.x86_64.rpm
    sha:6c0292149c480e298f367cb769e4e40be229d9fe44acb7a5f2cce823adbd4753
  • corosynclib-2.4.5-7.el7.2.tuxcare.els1.i686.rpm
    sha:efde53f05a26c1e3a944b01c5b7129a529c9c95bf86e67cc65b02be9e2a9ee4d
  • corosynclib-2.4.5-7.el7.2.tuxcare.els1.x86_64.rpm
    sha:892530e2cd2b2ed8b4ea3f245a0e03f0064502cf5c742af0dfb1b72e6a31eb9b
  • corosynclib-devel-2.4.5-7.el7.2.tuxcare.els1.i686.rpm
    sha:12d6d13443903d1051f38691cb4a0a1d39bc3870707936855e28f7a3345290df
  • corosynclib-devel-2.4.5-7.el7.2.tuxcare.els1.x86_64.rpm
    sha:894a4acc71e512be5b6422fdb9dfdc7c1a399e0fc46cbcdf13ff6645fb427cbf
  • spausedd-2.4.5-7.el7.2.tuxcare.els1.i686.rpm
    sha:a4b95c47180313eb30c98ffdf6de72c5c5166d17881718a074d19ecc974d2080
  • spausedd-2.4.5-7.el7.2.tuxcare.els1.x86_64.rpm
    sha:e8d616c7c8c1a96038430737a3ba87a642fc55bd4ba2bc0868247f6767e98af0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.