[ALSA-2026:19200] Moderate: corosync security update
Type:
security
Severity:
moderate
Release date:
2026-06-23
Description:
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 corosynclib-3.1.10-1.el9_8.1.aarch64.rpm 20906ede3503d870b905e613f1183cd7e64ffeadc65e07c1c9cf393271558ff1
aarch64 corosync-vqsim-3.1.10-1.el9_8.1.aarch64.rpm f38f3b52cf25609f022dd0a49c76f3743fade57ac0dae7a04283b817374e8dcf
i686 corosynclib-3.1.10-1.el9_8.1.i686.rpm 0e0e0e743d075b6fbe4b6b3a553b3f99ab2393d9ae0c0ba4e652ace2382d2913
i686 corosynclib-devel-3.1.10-1.el9_8.1.i686.rpm 687d8cbea346f3cd51657b53d8f69e2094c61f4d1d4b2cca5389efbcf261730e
ppc64le corosync-vqsim-3.1.10-1.el9_8.1.ppc64le.rpm 226946a65119699c4e9de863ab3709696ecfc06e8dfba4f4ccf53cfa501a5290
ppc64le corosynclib-devel-3.1.10-1.el9_8.1.ppc64le.rpm afeb25a7b5ce4d56af0eb6b9ca0b3d6ab24f9733a58b9bc61d600253e7b8276b
ppc64le corosynclib-3.1.10-1.el9_8.1.ppc64le.rpm cc54d0ce8a7f0e542622368980bfe443f4b1c0a6e3721791eb4fca71dc944810
ppc64le corosync-3.1.10-1.el9_8.1.ppc64le.rpm f0f48679b001857346cf5afc1807e32aaee760de90897ed0f06008bac8e0afc0
s390x corosync-vqsim-3.1.10-1.el9_8.1.s390x.rpm 018bfb509179a82900296f272fc097c1ecd6c5c5cdf6545649f363e11273c56f
s390x corosynclib-devel-3.1.10-1.el9_8.1.s390x.rpm 461d97544d773fba63a5f2d09ec113a0b7ef1c05c2ded1c7cfbce74d2f760d79
s390x corosynclib-3.1.10-1.el9_8.1.s390x.rpm c5a5cb1aad9cee910eceda6f43c44c5d3ee94485837104470e7cba8501d6f7f5
s390x corosync-3.1.10-1.el9_8.1.s390x.rpm eb73a6cb992b31a23b6f07700704dcb97b7c9dad9a8856e0ef0690ddfa451753
x86_64 corosynclib-devel-3.1.10-1.el9_8.1.x86_64.rpm 050f4b2b4e43b0f866b48d35993efb0b5d3f799c5624b5b92a4f76c21a2e4295
x86_64 corosync-3.1.10-1.el9_8.1.x86_64.rpm 6535976d608d420bfa1efa6ac8842caa874be792e6a12153f7c56f3f41ca1d6a
x86_64 corosynclib-3.1.10-1.el9_8.1.x86_64.rpm 905696744c4a21358ecf5e6c683e52109cae11b8d4c12c4ec5865ba60f76a8ea
x86_64 corosync-vqsim-3.1.10-1.el9_8.1.x86_64.rpm fe731e4cc6ebbffebb145f4ab367865a07e6c0b5b0f05b7dbed66da013537a85
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.