[ALSA-2026:19043] Moderate: corosync security update
Type:
security
Severity:
moderate
Release date:
2026-07-15
Description:
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 corosynclib-3.1.10-1.el10_2.1.aarch64.rpm 5867f003f9fd32f9035dbccf0e1f413065abbf96bf9b34e8b32c8f745a46d65f
aarch64 corosync-vqsim-3.1.10-1.el10_2.1.aarch64.rpm e68dbc8ed3154bff923dea43b37c29e5c55720e73d70eaef36344cd95397066a
ppc64le corosync-vqsim-3.1.10-1.el10_2.1.ppc64le.rpm 442fda5ac2bc77b39314e54bfcf89f8dfd4706931c631b91f7780021c10693a5
ppc64le corosynclib-3.1.10-1.el10_2.1.ppc64le.rpm b228db67e30930ff635ac5ac796909a9c71fe78b80bec0b2287dc0d347af600a
ppc64le corosynclib-devel-3.1.10-1.el10_2.1.ppc64le.rpm c95a9fc85873b96b5288f0b4d463a4d0fc32eae8f909c65080fe755b7abcdff0
ppc64le corosync-3.1.10-1.el10_2.1.ppc64le.rpm ccc724e9ba9d44b5d495e19f5f76844b4e27f548bb14deae3a153bf31b58ba1f
s390x corosynclib-devel-3.1.10-1.el10_2.1.s390x.rpm 6ddde573443dbce60f54a8fb387e5aa8e5c7b66b3a623bfd082d9dafa8fa3e5b
s390x corosync-vqsim-3.1.10-1.el10_2.1.s390x.rpm 79447b5ac56d61449ebf959204e43572a3237eb8315ddfb27106fe7555e4b19b
s390x corosynclib-3.1.10-1.el10_2.1.s390x.rpm aa7a48eef2d25b0ade9a0b2a9698bae39e21101d117688300a93fd71ff86687a
s390x corosync-3.1.10-1.el10_2.1.s390x.rpm b9f68ba0f7f1077af9976b3f036b56adff3a2fa04454faffd8cd8bc0f8de73d5
x86_64 corosync-vqsim-3.1.10-1.el10_2.1.x86_64.rpm 2bf7afaae8a037242ca3f0e08b09c8d2f2210ebc4de410ed23b5ff97773d1f44
x86_64 corosynclib-3.1.10-1.el10_2.1.x86_64.rpm 58b62a363854ac452faada0b192f69eef204c88d0af1275104d00c82b7e791a5
x86_64 corosynclib-devel-3.1.10-1.el10_2.1.x86_64.rpm 6c6ffb96a36b6790c32c52804a06c7d41434c6cc6ec0c8b669ba0199f94a598b
x86_64 corosync-3.1.10-1.el10_2.1.x86_64.rpm dd3542430b4c6f6483d35a1c80248ceabc0a5cd9819a40410f683ae5ad9953a7
x86_64_v2 corosynclib-3.1.10-1.el10_2.1.x86_64_v2.rpm 17ee57c47daff63921244fd1ac9512112c6303ae2d9639170368be3d78b5ca8d
x86_64_v2 corosync-3.1.10-1.el10_2.1.x86_64_v2.rpm 2c446f501363c2466c3f2c53e2eeb667b159a784ccb5c6760fa6d1370086d57a
x86_64_v2 corosynclib-devel-3.1.10-1.el10_2.1.x86_64_v2.rpm 67baeee295d1b6bcefb4c66a770eaed6f6512a824b7013d2fe02b900b79e691e
x86_64_v2 corosync-vqsim-3.1.10-1.el10_2.1.x86_64_v2.rpm c0bca146081fc7ef341e760cca971c1e74c09f6d5335342c4d35b83463185b4a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.