-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 May 2026 23:24:43 +0200 Source: corosync Binary: corosync corosync-dbgsym corosync-notifyd corosync-notifyd-dbgsym corosync-vqsim corosync-vqsim-dbgsym libcfg-dev libcfg7 libcfg7-dbgsym libcmap-dev libcmap4 libcmap4-dbgsym libcorosync-common-dev libcorosync-common4 libcorosync-common4-dbgsym libcpg-dev libcpg4 libcpg4-dbgsym libquorum-dev libquorum5 libquorum5-dbgsym libsam-dev libsam4 libsam4-dbgsym libvotequorum-dev libvotequorum8 libvotequorum8-dbgsym Architecture: s390x Version: 3.1.7-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Ferenc Wágner Description: corosync - cluster engine daemon and utilities corosync-notifyd - cluster engine notification daemon corosync-vqsim - cluster engine votequorum simulator libcfg-dev - cluster engine CFG library development libcfg7 - cluster engine CFG library libcmap-dev - cluster engine CMAP library development libcmap4 - cluster engine CMAP library libcorosync-common-dev - cluster engine common development libcorosync-common4 - cluster engine common library libcpg-dev - cluster engine CPG library development libcpg4 - cluster engine CPG library libquorum-dev - cluster engine Quorum library development libquorum5 - cluster engine Quorum library libsam-dev - cluster engine SAM library development libsam4 - cluster engine SAM library libvotequorum-dev - cluster engine Votequorum library development libvotequorum8 - cluster engine Votequorum library Closes: 1133837 1133838 Changes: corosync (3.1.7-1+deb12u2) bookworm-security; urgency=high . * [809a6e8] New patch: totemsrp: Return error if sanity check fails. Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838) * [70d459c] New patch: totemsrp: Fix integer overflow in memb_join_sanity. Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837) Checksums-Sha1: e705b49707e6c7318db7946711b604ece6f6ea5f 729764 corosync-dbgsym_3.1.7-1+deb12u2_s390x.deb 4cb1b4833e3e7e610a6ec44cdaeefd03feb21363 115844 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_s390x.deb bca2ea8bf88b284a0fc80fb8d87f262525fdec8a 265952 corosync-notifyd_3.1.7-1+deb12u2_s390x.deb d634c7df6aa588aebf4ed7aedec901c3750d69d4 269172 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_s390x.deb 022e6c6b5ade12211526971dd045deeb1efed845 300652 corosync-vqsim_3.1.7-1+deb12u2_s390x.deb 511decd82f3874bcd939857c00451bd7a7268deb 15573 corosync_3.1.7-1+deb12u2_s390x-buildd.buildinfo fc7b8eabeb67f328406c35d0b6b09d7fe4c2f434 470468 corosync_3.1.7-1+deb12u2_s390x.deb 730ea417fcad0c47485a058d8825eaaf9046f104 252988 libcfg-dev_3.1.7-1+deb12u2_s390x.deb cb6a7dfd5709bb5eadb0280caac6b87c7a1fe1d7 59992 libcfg7-dbgsym_3.1.7-1+deb12u2_s390x.deb 97f9bfee4d1e213227ed25397e5f84ba2406808e 255540 libcfg7_3.1.7-1+deb12u2_s390x.deb 525ae889b12a6d09aa0a5ff06f6eaf15f5081609 285116 libcmap-dev_3.1.7-1+deb12u2_s390x.deb f3139b266e0d95de0278d0fba7549a247f162b19 65324 libcmap4-dbgsym_3.1.7-1+deb12u2_s390x.deb 32223cab5731e10b9474d2da2d999d5728f08fa6 256940 libcmap4_3.1.7-1+deb12u2_s390x.deb 4946fd9d0a31242f72a7ffa97dd01c11a09871e3 253516 libcorosync-common-dev_3.1.7-1+deb12u2_s390x.deb 41bcd26c0413719558cce26b4f5a907ce0df4447 19304 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_s390x.deb d69c2f965d5402d4d0f9e0772a5b418ba4a98995 252872 libcorosync-common4_3.1.7-1+deb12u2_s390x.deb c630d333d5a24c30c820a0918f554dda0fd25ab3 289356 libcpg-dev_3.1.7-1+deb12u2_s390x.deb e93589083ed34dafc142031f677cf28a04ba5485 77868 libcpg4-dbgsym_3.1.7-1+deb12u2_s390x.deb 559e85b7ab54478f0bade67a38eb096847daca86 257992 libcpg4_3.1.7-1+deb12u2_s390x.deb ddfa947cbc8daa2a41cb1d6a65280ba612e54d04 271608 libquorum-dev_3.1.7-1+deb12u2_s390x.deb 815c29a56b9fd2a7eeda77ccbd1d22aac30e481a 51684 libquorum5-dbgsym_3.1.7-1+deb12u2_s390x.deb 66ca09dc21a7cb96209c3d12406fdb2b61683d79 254376 libquorum5_3.1.7-1+deb12u2_s390x.deb 53d9349c0cee7b0af42706065423144bf5811c5b 278084 libsam-dev_3.1.7-1+deb12u2_s390x.deb 7b9e9e803ac851c60e80dd93d7a89fc17041aa29 67756 libsam4-dbgsym_3.1.7-1+deb12u2_s390x.deb f60418cfe71c35dd5032cc5459e9fca00c22b466 257848 libsam4_3.1.7-1+deb12u2_s390x.deb 341cf737f9bdd8f1e4a5b301ee8f4e09d6510b3a 283680 libvotequorum-dev_3.1.7-1+deb12u2_s390x.deb 15a23fe2e9a9afa9386ad7ec077e4b09472750ca 55476 libvotequorum8-dbgsym_3.1.7-1+deb12u2_s390x.deb 574376d13d207fdcd554b10baad2cb7ac98ea06c 255016 libvotequorum8_3.1.7-1+deb12u2_s390x.deb Checksums-Sha256: 9419b98368ab5dee052d2f27a2ebe9b15d5ae9e1f02ef3303287e55291db8bf1 729764 corosync-dbgsym_3.1.7-1+deb12u2_s390x.deb 6842c36215b03574065ae8556d03da418908973c5c24e1f5e020479b8ff2682f 115844 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_s390x.deb 97e16a089eb47bf0aaf23a70d171e55c2d933d523843064a6d23fae34cbeb4db 265952 corosync-notifyd_3.1.7-1+deb12u2_s390x.deb 7184ce29cdb97127d5bc644c62c3626311fcd53becfbbbdced4dee23ecd0e920 269172 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_s390x.deb cf073add6c9efaaaa4c7cb52f7b9d53288533688ee2544bcbc7d8c9d7bef43d2 300652 corosync-vqsim_3.1.7-1+deb12u2_s390x.deb da85cb9bbfa44439e8145f653f620f1bc7cf2762858545bc6d4ccadbfa30a29f 15573 corosync_3.1.7-1+deb12u2_s390x-buildd.buildinfo bb03b4606601a7d8e6734c14fee3bf3ef91a9994900da4a1929681671b7ce615 470468 corosync_3.1.7-1+deb12u2_s390x.deb 74cc0707d0f2774a7baf111f61a3cd9ecba614fd2ddc21100c5c25727e8d7964 252988 libcfg-dev_3.1.7-1+deb12u2_s390x.deb 02ecc5022d87a86769cfc9dd0fb0f9fc81bac8bc1b9e0ecbe29d1c4162d8ef55 59992 libcfg7-dbgsym_3.1.7-1+deb12u2_s390x.deb 6d64fecb0dac8ec7984ad3b3669d666bfd11522e0326e85363d5c62b8c1df59c 255540 libcfg7_3.1.7-1+deb12u2_s390x.deb 134afcc925f7a2ffa9cae62c7c023d770ea58dd8a759fdb6945b573ed98b62ca 285116 libcmap-dev_3.1.7-1+deb12u2_s390x.deb f70ee64755fd4f073f1992eb7a3ea197c39e136b27970f7353315a84a2fdfbef 65324 libcmap4-dbgsym_3.1.7-1+deb12u2_s390x.deb 772b7890633513c74169a28de0c28d30731157a537103cf808226b821d3269e4 256940 libcmap4_3.1.7-1+deb12u2_s390x.deb aad314fa17e48eaa63ff2148214bb0d355927ed67ba0a69027bce6f613a1f341 253516 libcorosync-common-dev_3.1.7-1+deb12u2_s390x.deb 651f9a0198a37a5e2c1fcb40b729721317cbc24859ed712c35e86354b3b5ea8e 19304 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_s390x.deb fe26b65b617673aac5fe2f28bdbcae5a61d43e87a59d9fd63a543e51d6f2f6f6 252872 libcorosync-common4_3.1.7-1+deb12u2_s390x.deb 4bf4e911ccfa49dd66c38bf85d3c7e7ab11679d518a066b85cffaf6942394c94 289356 libcpg-dev_3.1.7-1+deb12u2_s390x.deb b36820bbaa2e170f4c50b7a3d2a13f40b3c713381bd4df230b86d0fb76d9c3ac 77868 libcpg4-dbgsym_3.1.7-1+deb12u2_s390x.deb 10d7d37709e5bb3a295fa0bc61d7e716c012f0e8fddeb0c032730525e6060406 257992 libcpg4_3.1.7-1+deb12u2_s390x.deb 6008e169eaa40079a1226dd1b25a07d17be292ba8d938aee44eb3cbbcbfd9990 271608 libquorum-dev_3.1.7-1+deb12u2_s390x.deb 1024200bd6c5ae9136c8d69d238710589435b8c3266ac3ce1b32e0bdd5d5b792 51684 libquorum5-dbgsym_3.1.7-1+deb12u2_s390x.deb 742d0943cf83079907e241c7fad08244a38c96174a96c13422dca7d34d783349 254376 libquorum5_3.1.7-1+deb12u2_s390x.deb d583fab30135576d5911bbec4044e87d2f3f5fb70a18b7007cdf5fca1e176b25 278084 libsam-dev_3.1.7-1+deb12u2_s390x.deb 81462a57d55f5e0c3720a65aad7459e6ff6bab76ffc452a8e8e9017a175a81e4 67756 libsam4-dbgsym_3.1.7-1+deb12u2_s390x.deb 2232c49e8ddf102b7dbefe79faf2235599a696001d979940b6caa1150d912f56 257848 libsam4_3.1.7-1+deb12u2_s390x.deb 1299848b9dd8fd9f00e8e542d55127a6f9d23e303e94b325f31537bb32ab0498 283680 libvotequorum-dev_3.1.7-1+deb12u2_s390x.deb b60a907de04c14ae1661d95fd799088387672521e5c74d717cf4011d98586463 55476 libvotequorum8-dbgsym_3.1.7-1+deb12u2_s390x.deb 681a6763b6a671e038c734f87ec21d301e2fb5847741decbd68427e30525f893 255016 libvotequorum8_3.1.7-1+deb12u2_s390x.deb Files: faf0832b24ec7c1cbaa0f3e90d7834d4 729764 debug optional corosync-dbgsym_3.1.7-1+deb12u2_s390x.deb a45fba055f04cde05866a1e87b23aaee 115844 debug optional corosync-notifyd-dbgsym_3.1.7-1+deb12u2_s390x.deb cf1dc83c8242e0ccd209e5e08fb6f560 265952 admin optional corosync-notifyd_3.1.7-1+deb12u2_s390x.deb b6b9434a5376361e460e5e65b43e6f0b 269172 debug optional corosync-vqsim-dbgsym_3.1.7-1+deb12u2_s390x.deb 056731b90cb9ac24e37596389f69dc61 300652 admin optional corosync-vqsim_3.1.7-1+deb12u2_s390x.deb 29a870fd07feeb9c239f46f5b4be98eb 15573 admin optional corosync_3.1.7-1+deb12u2_s390x-buildd.buildinfo 8a731498f7329b769064599842c4bd17 470468 admin optional corosync_3.1.7-1+deb12u2_s390x.deb d4601c3aadca373836062d859fd0491b 252988 libdevel optional libcfg-dev_3.1.7-1+deb12u2_s390x.deb 74b585299a26c23db0ee9d327997bad4 59992 debug optional libcfg7-dbgsym_3.1.7-1+deb12u2_s390x.deb ec5a938c4b6410e6d88d92f06434884a 255540 libs optional libcfg7_3.1.7-1+deb12u2_s390x.deb 83f58f938ac81c2e9b3c3066f27afffd 285116 libdevel optional libcmap-dev_3.1.7-1+deb12u2_s390x.deb 09d9e871569a1cfaf8bad1f49e4e25c3 65324 debug optional libcmap4-dbgsym_3.1.7-1+deb12u2_s390x.deb c4907843158f49ae594a80f3d1993df0 256940 libs optional libcmap4_3.1.7-1+deb12u2_s390x.deb d971fe73bce84f3ad3bae776bc65e5f8 253516 libdevel optional libcorosync-common-dev_3.1.7-1+deb12u2_s390x.deb fc5834e70b71b94738b5760ea886a7d9 19304 debug optional libcorosync-common4-dbgsym_3.1.7-1+deb12u2_s390x.deb 0d35434c02ababdf2e3df181e8de0fa1 252872 libs optional libcorosync-common4_3.1.7-1+deb12u2_s390x.deb 83f356132c8a3cedb8f9f91418beeb0b 289356 libdevel optional libcpg-dev_3.1.7-1+deb12u2_s390x.deb 56e36da9a85c4c2439eca3bfffb64faf 77868 debug optional libcpg4-dbgsym_3.1.7-1+deb12u2_s390x.deb 336bbf227f98fd11ca1218641d997491 257992 libs optional libcpg4_3.1.7-1+deb12u2_s390x.deb d934300eeea34301332e5adf3942d4c7 271608 libdevel optional libquorum-dev_3.1.7-1+deb12u2_s390x.deb d1ad23f3c7df6037a49d0f404bf30b04 51684 debug optional libquorum5-dbgsym_3.1.7-1+deb12u2_s390x.deb 649ed13d012d55527c8bdd0e498a7670 254376 libs optional libquorum5_3.1.7-1+deb12u2_s390x.deb da8559da8f54c4db2748277828554c96 278084 libdevel optional libsam-dev_3.1.7-1+deb12u2_s390x.deb 999f9fc696acf8f37bfe66f52b0727e8 67756 debug optional libsam4-dbgsym_3.1.7-1+deb12u2_s390x.deb 623868942648611dd9615adcc637563e 257848 libs optional libsam4_3.1.7-1+deb12u2_s390x.deb 03cea3f29503cff0aa3d9372807bb708 283680 libdevel optional libvotequorum-dev_3.1.7-1+deb12u2_s390x.deb fcdf4564545bd13934175c763fb93c72 55476 debug optional libvotequorum8-dbgsym_3.1.7-1+deb12u2_s390x.deb 94f4ce783fc420f304d34a185573242e 255016 libs optional libvotequorum8_3.1.7-1+deb12u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmn+O1IACgkQkaCrxAR3 BY03/A/+Pvy+Gpb+6v8DKmX7dKPv78H59i4IrC1MwolAdu/jtQYpmHNo0KtO8imm ufsiacpmfa/b+cPL9qy3glEr7mWgqYKyqKA7fP5TTicE9M9wwj/VsfOeww6XlR5S higWyJwq03tJncSsoFYZZ6sSMbL5uk5s9GWi3eGkmPIOmTshJ8LgVifEDa+yyp+w QE71nKrVDaptanmzNAzktZ0J9kE1nnsrtidgFrnXlZCH1hhgxFTY5dY1mVaVlbnZ U/1JTzY+KP25YRS159+24B1MDYjOlN6nmEcxFQ2o//RDL8FRI4r/Y2BiDhj55BT7 Nty+gExWz7sAYhWrDSR4AqDLJVE19m1XnuT6WpNhvAPmXD85IbgOlttIL2vsqCq1 KWwfvU92jjgASwsSaePY8YB8skAhyWf4f5ybUol8kJ2Qpe7Wc+YWDoPrTsKYnJAt ahECyIRlANUyU+WXfjZqQ9Y7Yir2jOc4wjuoBKErItc4xQh2abu6c/TJZ65V/6VK JsD5CCAWSkG2Uzb/dW85NHolC1j6TqjA6SzfXM71QlfoqJWjLei6U/KRQiHLflx+ DSzD6dOWK58G1yLrr6FUtM2aPzbDvpUlsmjU1vumbOpJtfkHPfaeAyzuGHhXxooU pwY8u27/NEkUvh5tzCBBtyFIBysmoTSWoB8kjPxdZHS/44KHg4w= =0KeS -----END PGP SIGNATURE-----