[ALSA-2026:69277] Important: corosync security update
Type:
security
Severity:
important
Release date:
2026-09-22
Description:
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 corosync-vqsim-3.1.8-1.el8_10.2.aarch64.rpm dec86aadff91337db6eec0e89438c75f4c727d62ac18c4043b90a89e835b05a5
aarch64 corosynclib-3.1.8-1.el8_10.2.aarch64.rpm ef0e60d3c1835c168ffbaa20f35485cab4b09f9f07f0883e1383355f3a163abc
i686 corosynclib-3.1.8-1.el8_10.2.i686.rpm 93a5fd4f6897a7b2a10c9ceef329b7ccf5f0c83ed2705c94eb4f6cd5c938c94f
i686 corosynclib-devel-3.1.8-1.el8_10.2.i686.rpm a56d9fcc7a1e9dfa123884ee6848c19964a18c3d9642ca2b869c84de6e503e22
ppc64le corosync-3.1.8-1.el8_10.2.ppc64le.rpm 2dd8e1f147b8b4a18e4ffdadc7bbff2ae033d3f5da1a94b1cd22e9b035beb29f
ppc64le corosync-vqsim-3.1.8-1.el8_10.2.ppc64le.rpm 6fed9488312ed213010a178cf5c4c255be26d7cdf8af061b0fde4376b6058056
ppc64le spausedd-3.1.8-1.el8_10.2.ppc64le.rpm 93efc716c7af80429a6cd7e1260ae267e81cfa86518b9fff2c2b77eb7ec6c12e
ppc64le corosynclib-devel-3.1.8-1.el8_10.2.ppc64le.rpm ef301b0b44006d91c05fb0b6fcc0036099b554480a97d5a8962ab9a86c7a8e8a
ppc64le corosynclib-3.1.8-1.el8_10.2.ppc64le.rpm f5d2748e0a9547397fe52f43ea46a327dc84ab207dba08a195f2e3e3dd07a43b
s390x corosynclib-3.1.8-1.el8_10.2.s390x.rpm 0809ce6b7e537b288cc6fd33bd02d5d30e9bb44e8e75eb239332ab32baf97047
s390x corosync-vqsim-3.1.8-1.el8_10.2.s390x.rpm 154d25641b8715fe9eea2e85e62f832a6acc156eaf988a899b0e100f8df68e69
s390x corosynclib-devel-3.1.8-1.el8_10.2.s390x.rpm 6692647f3d7ca79d83b19b7916b4d499777b69b3c2165d17bcf4277882109274
s390x corosync-3.1.8-1.el8_10.2.s390x.rpm 97ad5db664a6a5624bc924f5450b5331422a035eef27d7a9c0bbaf673cd33038
s390x spausedd-3.1.8-1.el8_10.2.s390x.rpm daec12c80f8fdeb7020bc8a690ca899ce36e2bc4c61d59b37b01cdaa6939c744
x86_64 spausedd-3.1.8-1.el8_10.2.x86_64.rpm 222ffd2dd4674ba20bb5f25fc0fae068f19dbad4abbe1c4c412d0d1556dafe4f
x86_64 corosync-vqsim-3.1.8-1.el8_10.2.x86_64.rpm 55dab84d54a98e955717ef4ece0772204ec820b75dab435bd53b1b3a78c966b6
x86_64 corosynclib-devel-3.1.8-1.el8_10.2.x86_64.rpm 661e302fe16fe6bc56046c9a11df848c5dcd4b990f8320d67e95360d60197db8
x86_64 corosync-3.1.8-1.el8_10.2.x86_64.rpm afc3737298430db8f8af02291f4f33e8f0c20e948d5ffb5c73c64b553015ef08
x86_64 corosynclib-3.1.8-1.el8_10.2.x86_64.rpm d4ea0e2e33d0341adc7092c667bde051e9405f9cb83aa1fec79cf6e0bd306292
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.