ELSA-2026-19043

ELSA-2026-19043 - corosync security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-07-08

Description


[3.1.10-1.1]
- Resolves: RHEL-163802
- Resolves: RHEL-163823

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)

[3.1.10-1]
- Resolves: RHEL-122945

- New upstream release (RHEL-122945)


Related CVEs


CVE-2026-35091
CVE-2026-35092

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_aarch64_addons
corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_aarch64_appstream
corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_aarch64_codeready_builder
corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_aarch64_distro_builder
corosync-vqsim-3.1.10-1.el10_2.1.aarch64.rpm481c59e346e9410922b8a2b1b193133d80d07347dd491ffa3be87aa30776fdfd-ol10_aarch64_codeready_builder
corosynclib-3.1.10-1.el10_2.1.aarch64.rpm88e30512764daed921d4faea07daf0884acc6b416874f3c7317f7472f025da61-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_x86_64_addons
corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_x86_64_appstream
corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_x86_64_codeready_builder
corosync-3.1.10-1.el10_2.1.src.rpm787c1c00d22bf3081931cc5793bca8f7aede0128f90b530e19a8b937cf5b130a-ol10_x86_64_distro_builder
corosync-vqsim-3.1.10-1.el10_2.1.x86_64.rpmb4743ad3393407c8e1d62cc0c2c7abeef65612a6a72f0d35bce2a62d299a6303-ol10_x86_64_codeready_builder
corosynclib-3.1.10-1.el10_2.1.x86_64.rpmb7abd68f2a291701212a111cd76dbdf8ff16efe92a6de36ec87d57440a2641d6-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete