[CLSA-2026:1793103800] corosync: Fix of CVE-2025-30472
Type:
security
Severity:
Critical
Release date:
2026-10-27 12:23:30 UTC
Description:
- CVE-2025-30472: fix stack-based buffer overflow in orf_token endian conversion - CVE-2026-35091: fix missing error return in memb_commit_token sanity check - CVE-2026-35092: fix integer overflow in memb_join sanity check - CVE-2026-81665: fix buffer overflow in totempg message reassembly
CVEs fixed:
Updated packages:
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:17805ed2f2d203eaa169ba3e7675df8a059ffdc46775c3cbf1548c6dfe174954
  • corosync-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:3b3fe403e14850de66cdde2ae4b62c126730983608e321e1c9df5f6cee2c9a5b
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:d4239db763c1f447b65fa3c5402fc65b97914cdd9274d0d874959902c315551c
  • corosync-qdevice-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:48494c68878349f70cf8d6ce02c610f2a6d242312b3cd375c2d520b20a305b94
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:f2e70e3e7faab5f10bbaf8376708ca79ec4664ff439e1419f099ec169d8aff00
  • corosync-qnetd-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:d76da56b9b2b6058842349e6dcc769cf50e7a71354e0c83b159d17d8f55e58cb
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:905a5d99312468b430f7552b005022671d0fa3991d2a66abac02b93c904f5f47
  • corosynclib-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:15afdfeafbe7391295c23d2d3459794af79ccb9206738c9f589e663e50fa4bca
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:61cf63f4caa5480c9a655e0576b40af2569b1740eacde53b5e9da05a7339ca60
  • corosynclib-devel-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:b93c10043a40f2e15ad6c3a105f0fcd0acd098e6e4bd9971e923cc8243fbdb3e
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.i686.rpm
    sha:118f1712dfcf2f17c70cd10134b781206eef9632fc974df355c84dd9c649ccbd
  • spausedd-2.4.5-7.el7_9.2.tuxcare.els1.x86_64.rpm
    sha:897f4895e1510de55853279ab4009db7d599d80da52fcafd7d5981d0699fd581
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.