[ALSA-2026:67872] Important: corosync security update
Type:
security
Severity:
important
Release date:
2026-09-30
Description:
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 corosynclib-3.1.10-1.el10_2.2.aarch64.rpm 6286b4c8f928115dc9650a1a3db35fbe79a663bd60d9711335ffb3b3f8566123
aarch64 corosync-vqsim-3.1.10-1.el10_2.2.aarch64.rpm ee7cf74a0e1bce005ab72b4f0db2e355e9c0fe4c2985fffb71a58c03bf7cfb82
ppc64le corosync-3.1.10-1.el10_2.2.ppc64le.rpm 4c9d44c39070478b43f3e9ce68e187ca89852ec9de19f10398b9a3c8aba69872
ppc64le corosynclib-3.1.10-1.el10_2.2.ppc64le.rpm 9cd229b3d7686abd6ad101d93895c54e2334c536922ecff31d73fc22975fdf74
ppc64le corosync-vqsim-3.1.10-1.el10_2.2.ppc64le.rpm dec5a679998666b9ee7a1905aa8c2a9d2588c7263e6f980d27c8de78317a5c4c
ppc64le corosynclib-devel-3.1.10-1.el10_2.2.ppc64le.rpm f79e4452c3b77e834504cd35c413f1210a9a61723857c67136d4a12edb0763c1
s390x corosync-vqsim-3.1.10-1.el10_2.2.s390x.rpm 02b6e1f826830e0bfe54500870e7136ab9871e61b97c70e4bce7fe03bfedf136
s390x corosync-3.1.10-1.el10_2.2.s390x.rpm 0de5bec3f803640559b59711c9ff61bfbeee2e890055fd30c88a6033315a7568
s390x corosynclib-3.1.10-1.el10_2.2.s390x.rpm 11aae9f4db6be2b7509058179f2067bcf76c49a352941f7922404a393f40d0c7
s390x corosynclib-devel-3.1.10-1.el10_2.2.s390x.rpm 4efc144a52df31ec172399b32227ac5716f049e1ea0f19f5114a71a0c45df9e8
x86_64 corosynclib-devel-3.1.10-1.el10_2.2.x86_64.rpm 11ebba6c22c851a2f95aa9567f60f2120107c0e9cca3549c777025a259cec5df
x86_64 corosynclib-3.1.10-1.el10_2.2.x86_64.rpm 3340086cdba2e7c54da0824bd58d7ff8bbe7f52f6596b9037f02fe28bf3cb689
x86_64 corosync-3.1.10-1.el10_2.2.x86_64.rpm 95d408bcc274eadc29f1c4e9b6f870f686245b6a4c8fd96fe99bc04fcabd616a
x86_64 corosync-vqsim-3.1.10-1.el10_2.2.x86_64.rpm bd3918b2938091ed4b6f3e7f4e6f6f174202b0b04b815f48c6556bc3e7932bf7
x86_64_v2 corosynclib-devel-3.1.10-1.el10_2.2.x86_64_v2.rpm 7a176c0834e8adeee0d2bb37e435453b2844a67af3f062667b3c25b1f04259f7
x86_64_v2 corosync-vqsim-3.1.10-1.el10_2.2.x86_64_v2.rpm 804bb6dc1e29a6378035f4f880cb031d672ee20627e6b87c4b400f379fb48f4c
x86_64_v2 corosync-3.1.10-1.el10_2.2.x86_64_v2.rpm 87bd3d08a856b5135c5837d294c008de15280e340f4a513bb1d080160a3e57f6
x86_64_v2 corosynclib-3.1.10-1.el10_2.2.x86_64_v2.rpm ef4bed824704876780d778d538e58217688ef94215fae7c3461cd9ba2db63355
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.