Red Hat Security Advisory

RHSA-2026:14205

corosync security update

Released 2026-05-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) corosync-3.1.9-1.el10_0.2, corosynclib-3.1.9-1.el10_0.2
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) corosync-vqsim-3.1.9-1.el10_0.2
Red Hat Enterprise Linux High Availability EUS (v. 10.0) corosync-3.1.9-1.el10_0.2, corosynclib-devel-3.1.9-1.el10_0.2

TI-2026-27291 CVE-2026-35091 · GHSA-hmg2-5h4j-37m9

MEDIUM 43

A flaw was found in Corosync.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00883 Published 2026-04-01 Fixed in 3.1.9-2.el10_1.1, 3.1.10-1.el10_2.1 +12 CWE-253

TI-2026-27292 CVE-2026-35092 · GHSA-g4g9-h6f9-v5x2

MEDIUM 41

A flaw was found in Corosync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01012 Published 2026-04-01 Fixed in 3.1.9-2.el10_1.1, 3.1.10-1.el10_2.1 +12 CWE-190