Release date:
2026-10-26 15:45:34 UTC
Description:
- CVE-2025-30472: stack buffer overflow in orf_token_endian_convert()
- CVE-2026-35091: out-of-bounds read via check_memb_commit_token_sanity()
- CVE-2026-35092: integer overflow in check_memb_join_sanity()
- CVE-2026-81665: heap buffer overflow in totempg_deliver_fn()
Updated packages:
-
corosync-3.1.8-1.el8.tuxcare.els1.x86_64.rpm
sha:c9014b29b56c05b55289bf2fd5c8fdc72696363cd67b777339d966694d6ba6ef
-
corosync-vqsim-3.1.8-1.el8.tuxcare.els1.x86_64.rpm
sha:7161134bba02be592b754dc35598635aa7f362fd20abc8aec0c9b13cead1ef26
-
corosynclib-3.1.8-1.el8.tuxcare.els1.x86_64.rpm
sha:5575896c26f22bf5ef663360b42fe7e276e5606088266df2463bcfd39dd4b022
-
corosynclib-devel-3.1.8-1.el8.tuxcare.els1.x86_64.rpm
sha:e4939394ed5a4822db9bf2d7f8a7ca5b11db9b61c0f7373ccac7adf9808255ce
-
spausedd-3.1.8-1.el8.tuxcare.els1.x86_64.rpm
sha:4f7fff11b5e5b7607d4bfe25318548694a38eb7e9b137f1a4b433d4ec4a0d793
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
