Red Hat Security AdvisoryRHSA-2026:69280
corosync security update
Released 2026-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-3.1.0-3.el8_4.3
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-3.1.0-3.el8_4.3
- Red Hat Enterprise Linux High Availability AUS (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-devel-3.1.0-3.el8_4.3, spausedd-3.1.0-3.el8_4.3
- Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-devel-3.1.0-3.el8_4.3, spausedd-3.1.0-3.el8_4.3
- Red Hat Enterprise Linux ResilientStorage EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-devel-3.1.0-3.el8_4.3, spausedd-3.1.0-3.el8_4.3
Fixes 1 record
Priority LOW 35
A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00416 · Published 2026-09-04 · Partial fix · 3.1.10-1.el10_2.2, 3.1.9-1.el10_0.3 +9 CWE-122
