Red Hat Security Advisory

RHSA-2026:19200

corosync security update

Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) corosync-3.1.10-1.el9_8.1, corosynclib-3.1.10-1.el9_8.1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) corosync-vqsim-3.1.10-1.el9_8.1
Red Hat Enterprise Linux High Availability (v. 9) corosync-3.1.10-1.el9_8.1, corosynclib-devel-3.1.10-1.el9_8.1
Red Hat Enterprise Linux Resilient Storage (v. 9) corosync-3.1.10-1.el9_8.1, corosynclib-devel-3.1.10-1.el9_8.1

TI-2026-27291 CVE-2026-35091 · GHSA-hmg2-5h4j-37m9

MEDIUM 43

A flaw was found in Corosync.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00883 Published 2026-04-01 Fixed in 3.1.9-2.el10_1.1, 3.1.10-1.el10_2.1 +12 CWE-253

TI-2026-27292 CVE-2026-35092 · GHSA-g4g9-h6f9-v5x2

MEDIUM 41

A flaw was found in Corosync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01012 Published 2026-04-01 Fixed in 3.1.9-2.el10_1.1, 3.1.10-1.el10_2.1 +12 CWE-190