[ALSA-2026:13657] Moderate: corosync security update
Type:
security
Severity:
moderate
Release date:
2026-05-06
Description:
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 corosync-vqsim-3.1.8-1.el8_10.1.aarch64.rpm 2f56d04fa513ea38dd056de973bdac324cc0197412328ff8c66b7ebb88df8dd3
aarch64 corosynclib-3.1.8-1.el8_10.1.aarch64.rpm 4de049fd5ee5163b284d27d4d728f5bbb087badb81762bc6089bd14f786d4e86
i686 corosynclib-devel-3.1.8-1.el8_10.1.i686.rpm 73a7243c24350e90567bc357064063739cc8ed4e7717e3471c4bbc945a251085
i686 corosynclib-3.1.8-1.el8_10.1.i686.rpm fd8f10705d310eba9c1928eceac82c0130d81ca60a1b942ad9b97a4109dec3cc
ppc64le corosynclib-3.1.8-1.el8_10.1.ppc64le.rpm 015dbe01f81290204d0df5e9ef2663f6dd9c7aed07835c170a8bbbf6cd5e4340
ppc64le spausedd-3.1.8-1.el8_10.1.ppc64le.rpm 3d4aaf9d14438bc2190647322ecec1f8c76d5c898247a64932d57a03caf2cc51
ppc64le corosync-3.1.8-1.el8_10.1.ppc64le.rpm 3d6e97646d5a86ee99e20632a934d01ab4c311878ef59c3a4acd5a6e6cc612e5
ppc64le corosynclib-devel-3.1.8-1.el8_10.1.ppc64le.rpm a01d8a85f6994631c6956c9dcf1cb8dc04fa7c4007c539f1d64d2e1c43c4597f
ppc64le corosync-vqsim-3.1.8-1.el8_10.1.ppc64le.rpm b633083bfeb986ea15787a3bf7bf609b337122ac211eff597424d652ba7e0222
s390x spausedd-3.1.8-1.el8_10.1.s390x.rpm 465b6f385b26b12e70016dc554e39cbeba472bf8d3a5bf6143e0124bb2174787
s390x corosync-vqsim-3.1.8-1.el8_10.1.s390x.rpm 66ac9912876d2bcda2f36284bf9767ed9213eaf2adfdc434fd2600eae7db8b2e
s390x corosynclib-3.1.8-1.el8_10.1.s390x.rpm 860421915c3b0d9bce15924c2d06e008a051f7608b8bbeb65f8bac1707fd935a
s390x corosync-3.1.8-1.el8_10.1.s390x.rpm c752118f7a26e7d5292b8d13d0370070710fc1d2015abac62475e4a4ae1dd2ae
s390x corosynclib-devel-3.1.8-1.el8_10.1.s390x.rpm f6e1275e241528b797d2203a8bffbbcea4793b92735b8a13d5f1a42e0815c98d
x86_64 corosynclib-3.1.8-1.el8_10.1.x86_64.rpm 0309f94f7587e6db4503af870c52c1286d2346a24a43769997f9d80b07e2ff9e
x86_64 spausedd-3.1.8-1.el8_10.1.x86_64.rpm 572eba04193e4b68125f8b3522d58e5499dc766c09d0a3f09129cd3b0a238870
x86_64 corosync-3.1.8-1.el8_10.1.x86_64.rpm 626e22323b4830e49863b054cdd73cec42e13e53407252f361b5b9a87eba1ba8
x86_64 corosync-vqsim-3.1.8-1.el8_10.1.x86_64.rpm 65e7b19badd6a130101965eb381b770f0efe3e916b2b6b1e3aee1efcb0d55b42
x86_64 corosynclib-devel-3.1.8-1.el8_10.1.x86_64.rpm a9f702c05d1f13118738599d1acee961ddb0aa67d350bf4a3839836c612e24ab
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.