-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 May 2026 23:24:43 +0200
Source: corosync
Binary: corosync corosync-dbgsym corosync-notifyd corosync-notifyd-dbgsym corosync-vqsim corosync-vqsim-dbgsym libcfg-dev libcfg7 libcfg7-dbgsym libcmap-dev libcmap4 libcmap4-dbgsym libcorosync-common-dev libcorosync-common4 libcorosync-common4-dbgsym libcpg-dev libcpg4 libcpg4-dbgsym libquorum-dev libquorum5 libquorum5-dbgsym libsam-dev libsam4 libsam4-dbgsym libvotequorum-dev libvotequorum8 libvotequorum8-dbgsym
Architecture: amd64
Version: 3.1.7-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Ferenc Wágner <wferi@debian.org>
Description:
 corosync   - cluster engine daemon and utilities
 corosync-notifyd - cluster engine notification daemon
 corosync-vqsim - cluster engine votequorum simulator
 libcfg-dev - cluster engine CFG library development
 libcfg7    - cluster engine CFG library
 libcmap-dev - cluster engine CMAP library development
 libcmap4   - cluster engine CMAP library
 libcorosync-common-dev - cluster engine common development
 libcorosync-common4 - cluster engine common library
 libcpg-dev - cluster engine CPG library development
 libcpg4    - cluster engine CPG library
 libquorum-dev - cluster engine Quorum library development
 libquorum5 - cluster engine Quorum library
 libsam-dev - cluster engine SAM library development
 libsam4    - cluster engine SAM library
 libvotequorum-dev - cluster engine Votequorum library development
 libvotequorum8 - cluster engine Votequorum library
Closes: 1133837 1133838
Changes:
 corosync (3.1.7-1+deb12u2) bookworm-security; urgency=high
 .
   * [809a6e8] New patch: totemsrp: Return error if sanity check fails.
     Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838)
   * [70d459c] New patch: totemsrp: Fix integer overflow in memb_join_sanity.
     Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837)
Checksums-Sha1:
 62a31e01ab4685573c8d9447a8a8840143ead163 736348 corosync-dbgsym_3.1.7-1+deb12u2_amd64.deb
 2a04ab322c5a058cf782a503a4a689de57abbdcc 117232 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_amd64.deb
 eba0c46db843a6413fa73c123b7f55e59bfaef29 267504 corosync-notifyd_3.1.7-1+deb12u2_amd64.deb
 2d93dcfc1d98627f798204082cb3ffc8d079e028 270692 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_amd64.deb
 7b3b1dca7dce4cc0860ea9c6b259ecb0450c867a 308656 corosync-vqsim_3.1.7-1+deb12u2_amd64.deb
 3db7b01e364edc2e690428307274c56ee19f36bf 15689 corosync_3.1.7-1+deb12u2_amd64-buildd.buildinfo
 a91cd7f4f02f310f8301461b6b8f3ef5bebd8a15 497476 corosync_3.1.7-1+deb12u2_amd64.deb
 5deb6a2f199dad51858a3037100eb270352bc438 252992 libcfg-dev_3.1.7-1+deb12u2_amd64.deb
 5441f59e269391212314c0757cda29b67e987c19 60752 libcfg7-dbgsym_3.1.7-1+deb12u2_amd64.deb
 a4bd229ba2eaf18f6e2cd30e6dc18707e2ec57e4 255952 libcfg7_3.1.7-1+deb12u2_amd64.deb
 e11ed4caa88505de722a35642b57f9df694dfa6a 285124 libcmap-dev_3.1.7-1+deb12u2_amd64.deb
 dc3fe4da3b3b2c10e125fe06badbcb04d888f940 66660 libcmap4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 bd5b87f5b16fdd011445c5251a6799a3ca1011af 257592 libcmap4_3.1.7-1+deb12u2_amd64.deb
 5b48c8aab6233dba18b050834996a89a0ebce6f1 253528 libcorosync-common-dev_3.1.7-1+deb12u2_amd64.deb
 121d7469855865ca348c396f9af63b476977f343 19576 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 fccd622eb753de75e85964ededdb6a8c32723b55 252936 libcorosync-common4_3.1.7-1+deb12u2_amd64.deb
 2cc01738451077eb56c2ea598a391ead85c6d04a 289356 libcpg-dev_3.1.7-1+deb12u2_amd64.deb
 175f8dcfd3b5e0f257c0ddbb16468078fa1cbbe8 79772 libcpg4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 e67f941dca238fd862fa3f9146ba17a72ec9eb96 259436 libcpg4_3.1.7-1+deb12u2_amd64.deb
 8a239a149d455851c5265b2212eeedfc447b20f7 271604 libquorum-dev_3.1.7-1+deb12u2_amd64.deb
 6158f12e4d982cf37f03d9d2243c6a0e5043a1bc 52360 libquorum5-dbgsym_3.1.7-1+deb12u2_amd64.deb
 613325f10c9f51eab3becbaf1fb38e42a06556f1 254652 libquorum5_3.1.7-1+deb12u2_amd64.deb
 e0630ad5bf9e2b6bea93d1b29273888b4746561e 278092 libsam-dev_3.1.7-1+deb12u2_amd64.deb
 18a63367afa2138c5b34bdb478a132cb5df4bdfc 68244 libsam4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 52e64143b5d1023154e6572bebb59acac3df458c 258692 libsam4_3.1.7-1+deb12u2_amd64.deb
 b981524965ced9718b2df2cf6856bd345fb91e88 283668 libvotequorum-dev_3.1.7-1+deb12u2_amd64.deb
 deeb2cbd1384a8590fa0ad821a9d16f65160d597 56072 libvotequorum8-dbgsym_3.1.7-1+deb12u2_amd64.deb
 82e46fd9645d4d39f41d8b7f0462ed7664bfe304 255428 libvotequorum8_3.1.7-1+deb12u2_amd64.deb
Checksums-Sha256:
 4c2367f02dbc0eedd0b14978f8136fe15c2025c345e95816d64831de8c0d10a1 736348 corosync-dbgsym_3.1.7-1+deb12u2_amd64.deb
 032165e4f29736c877ff7c0bfba580808a7d4edd0d5d5ebce5fddeb265382c09 117232 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_amd64.deb
 b85786f3de845554b849e70adea1b33d1a36ad016fab266492f373f4981de8e5 267504 corosync-notifyd_3.1.7-1+deb12u2_amd64.deb
 4a4d70674ea01856888c46b2a811a5f4c6836052a9afa8c800a0bf9907e91207 270692 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_amd64.deb
 bc6e6b2cfebc6512a796fd77b0ce15dc068c62a5c1f3bec9a34f18f3b217a838 308656 corosync-vqsim_3.1.7-1+deb12u2_amd64.deb
 3b7ac36f7e030a93fcc2d3e5228e750afd735b9ea46e525953baa691144ac407 15689 corosync_3.1.7-1+deb12u2_amd64-buildd.buildinfo
 31fa3071d84bf956a0c55815e464e1d580bd46e527beba3db13881c831b8913d 497476 corosync_3.1.7-1+deb12u2_amd64.deb
 986976a4d2e4fabf6b5d14d50163d76be3971c95f433766831de987a318fe6ea 252992 libcfg-dev_3.1.7-1+deb12u2_amd64.deb
 a3bcadc9cd371b1e6b88db7f88cd3b68dffd07267785e5939d3e3d4a17de5edd 60752 libcfg7-dbgsym_3.1.7-1+deb12u2_amd64.deb
 a168691ee4ab301b4169c5817b99b125484260511774ad0585fd08dca2c48442 255952 libcfg7_3.1.7-1+deb12u2_amd64.deb
 0fa285a6a9d58759979125ac388291c03ede39bc04341e0749a59057dd964bff 285124 libcmap-dev_3.1.7-1+deb12u2_amd64.deb
 b581f42f1433cd5dadb04652c07f049fda6e4cdc3c738986c42a32c434edd2e5 66660 libcmap4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 40ae1c9be4bec191a5dab75d6fe0a5c5590d647497ab49230d89430b3650a91a 257592 libcmap4_3.1.7-1+deb12u2_amd64.deb
 f67384c949c5ea675df95b0b1fb40270df845e1d66d3af8bdeae37c5d7f33f59 253528 libcorosync-common-dev_3.1.7-1+deb12u2_amd64.deb
 601e1c3a12a00e68d1514a6b06aaa3e6ab98eacb5092b240cbb775392f1f0c38 19576 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 534f37cb88f4724ad038a8a4760020fd21fec562e82fc2ecd6fcce4e83ce9ec6 252936 libcorosync-common4_3.1.7-1+deb12u2_amd64.deb
 af156d38f3777eadcae7d6e5d2a27840249ba6a1eb9c81cbea2f0fe143ab3659 289356 libcpg-dev_3.1.7-1+deb12u2_amd64.deb
 162ba4f27dc7b42db7b41525cc78def04b02ede969c20515fba4a50e1c8eb2be 79772 libcpg4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 0c9cf063bf6c18b5610f7c017f1908079d7a28e59c7ddeb5efc3e053bdff8a62 259436 libcpg4_3.1.7-1+deb12u2_amd64.deb
 c29c159158657d525bc7e39ff6e75a005940db97178b12107421e5649304cc77 271604 libquorum-dev_3.1.7-1+deb12u2_amd64.deb
 ab4d368ad400113f956ebc45e7ef1de3f9d6855816a5007d567d448121fd095c 52360 libquorum5-dbgsym_3.1.7-1+deb12u2_amd64.deb
 33c52051d0085de0d9022e848354a7fd0255da008e22bfe8389b98a07459f194 254652 libquorum5_3.1.7-1+deb12u2_amd64.deb
 722c8d82351dd45de3351d8754e29c3de78be587c21b12d1d56af6cc30a8b113 278092 libsam-dev_3.1.7-1+deb12u2_amd64.deb
 efbcbf44e712508c6d8db2f42be931bad13d9d83cfd4ff5e3e442ee564e2fb38 68244 libsam4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 7232b2b6ecfc4220b4d8d6c4a2a27780fa0134faa5242dd2462a724c7842b53b 258692 libsam4_3.1.7-1+deb12u2_amd64.deb
 ffcd9138bebd955a28697fcf98501827e0f08a9570cee1ef36132d6d47e9c1ae 283668 libvotequorum-dev_3.1.7-1+deb12u2_amd64.deb
 b8a3c9c27ba2cb5b8ab6c26665455ece4133df06b7cb8c06b12bc608b2bc4763 56072 libvotequorum8-dbgsym_3.1.7-1+deb12u2_amd64.deb
 c21d5a29ae3206e6d49e329dfe4c122360e89678b3d16cda38373e14ff83dc48 255428 libvotequorum8_3.1.7-1+deb12u2_amd64.deb
Files:
 492d47c311cf5a611930d785ba464b36 736348 debug optional corosync-dbgsym_3.1.7-1+deb12u2_amd64.deb
 893e6866784f879fe44136f08a478d25 117232 debug optional corosync-notifyd-dbgsym_3.1.7-1+deb12u2_amd64.deb
 1c0bc28929eca16ffc837b0a92bf12fc 267504 admin optional corosync-notifyd_3.1.7-1+deb12u2_amd64.deb
 d6d999c034bbdd67524be94f195a7deb 270692 debug optional corosync-vqsim-dbgsym_3.1.7-1+deb12u2_amd64.deb
 9ca5958e462ca4f5d0e30f44450917b2 308656 admin optional corosync-vqsim_3.1.7-1+deb12u2_amd64.deb
 cd37fa0fc091c0fdb78b863a62131fcf 15689 admin optional corosync_3.1.7-1+deb12u2_amd64-buildd.buildinfo
 1b6d267aac2bff48d9f08f10eb59a6c7 497476 admin optional corosync_3.1.7-1+deb12u2_amd64.deb
 017d360e513caa917bb0f71cca32bb43 252992 libdevel optional libcfg-dev_3.1.7-1+deb12u2_amd64.deb
 393c28806a123eb5613c301f59c4cb90 60752 debug optional libcfg7-dbgsym_3.1.7-1+deb12u2_amd64.deb
 65b3ce042dc3e7a18a1512f8291c0dce 255952 libs optional libcfg7_3.1.7-1+deb12u2_amd64.deb
 37c47ccc5f874d40dae966bc5a74cc81 285124 libdevel optional libcmap-dev_3.1.7-1+deb12u2_amd64.deb
 5ffac2b803d0ae9edd6759359190d0c4 66660 debug optional libcmap4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 f32b47c23f926a77950e76f883446a2c 257592 libs optional libcmap4_3.1.7-1+deb12u2_amd64.deb
 669ef4f15e18495a79a840946274f240 253528 libdevel optional libcorosync-common-dev_3.1.7-1+deb12u2_amd64.deb
 7cd982eeb8e5d3495c3ca7d5ca20686f 19576 debug optional libcorosync-common4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 e906a87e3a823af550486d837cf309a6 252936 libs optional libcorosync-common4_3.1.7-1+deb12u2_amd64.deb
 74b5147a1cffff6c62b9e903df6151a5 289356 libdevel optional libcpg-dev_3.1.7-1+deb12u2_amd64.deb
 0086fef377cb3a0686601871fe09fab2 79772 debug optional libcpg4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 1d562674ff2f9fb6909d076521b94812 259436 libs optional libcpg4_3.1.7-1+deb12u2_amd64.deb
 4b7a428262748b891b29653d6fbf777c 271604 libdevel optional libquorum-dev_3.1.7-1+deb12u2_amd64.deb
 ebbffd5a920f3d38f38d1f6ad8415015 52360 debug optional libquorum5-dbgsym_3.1.7-1+deb12u2_amd64.deb
 536a008f079b1cddc27536de13ccb387 254652 libs optional libquorum5_3.1.7-1+deb12u2_amd64.deb
 acc9fb5c647084ab8bfae34a71f4579c 278092 libdevel optional libsam-dev_3.1.7-1+deb12u2_amd64.deb
 63d9bf7112a35413dc0c9639b203bc00 68244 debug optional libsam4-dbgsym_3.1.7-1+deb12u2_amd64.deb
 81b6896afa5ec1b49f2d77f089c704dc 258692 libs optional libsam4_3.1.7-1+deb12u2_amd64.deb
 dbfcb2b86629db0b6d0691e85b33ca6e 283668 libdevel optional libvotequorum-dev_3.1.7-1+deb12u2_amd64.deb
 85271fd01e84f8de18298b10d9912259 56072 debug optional libvotequorum8-dbgsym_3.1.7-1+deb12u2_amd64.deb
 c6cc05e5a7569e127f7a86f690f02623 255428 libs optional libvotequorum8_3.1.7-1+deb12u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=sbcM
-----END PGP SIGNATURE-----