[CLSA-2026:1793084788] corosync: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 12:36:06 UTC
Description:
- CVE-2026-35091: fix missing error return in memb_commit_token sanity check - CVE-2026-35092: fix integer overflow in memb_join sanity check
CVEs fixed:
Updated packages:
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:ba0f902385a025e0512d270101c5934587edc344419fb37701fe54b867055570
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:76dfbd946b14cacd3cb8e6e258f91d6c317528b024c69567ef602ac49ed60c0e
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:3c4fa2b13a373a2ff9dfc6356acdf07531175435b214f472db311533f1742e78
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:10b7b938acc1e71dc124fc0419ddd10d039bb1bac1fdbc92e6bf7c646ff8ba46
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:d0dee1568eeaba239ec08d6fb53a2b14a4843ec5d544534747fc680856017267
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:cfdac0b2e3a57815fc040039086b35224c046d36be04f0fa70ece42fbe5ba988
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:eb3ca94892c5f4b79d63bd20dbeae5d7fdde5738c1c71eb26794b486445d7d2c
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:0bad81e8d062a10e4df6a13ac23d59ce14c9cd6bb093a21945681e29c260987e
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:c262ab31706a69cd661f0ef755f27d285ab4fb113ce930070886b605d8debc21
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:d8451714764b7583d3ab4d7ddc53dc502b7a338c5ae6ad51013fe0788413c4ad
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:693c63424f72627dde0bcee138c37316aa0363bc502aa205df57c1cfc1342c49
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:04e256d79402391163a472237cbf016419f5f76f653e00ff9d9b39948046e1e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.