Red Hat Security Advisory

RHSA-2026:20916

corosync security update

Released 2026-05-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) corosync-2.4.5-7.el7_9.3, corosync-qdevice-2.4.5-7.el7_9.3, corosync-qnetd-2.4.5-7.el7_9.3 +3
Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) corosync-2.4.5-7.el7_9.3, corosync-qdevice-2.4.5-7.el7_9.3, corosync-qnetd-2.4.5-7.el7_9.3 +3

TI-2026-27291 CVE-2026-35091 · GHSA-hmg2-5h4j-37m9

MEDIUM 43

A flaw was found in Corosync.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00883 Published 2026-04-01 Fixed in 3.1.9-2.el10_1.1, 3.1.10-1.el10_2.1 +12 CWE-253

TI-2026-27292 CVE-2026-35092 · GHSA-g4g9-h6f9-v5x2

MEDIUM 41

A flaw was found in Corosync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01012 Published 2026-04-01 Fixed in 3.1.9-2.el10_1.1, 3.1.10-1.el10_2.1 +12 CWE-190