-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 May 2026 23:24:43 +0200 Source: corosync Binary: corosync corosync-dbgsym corosync-notifyd corosync-notifyd-dbgsym corosync-vqsim corosync-vqsim-dbgsym libcfg-dev libcfg7 libcfg7-dbgsym libcmap-dev libcmap4 libcmap4-dbgsym libcorosync-common-dev libcorosync-common4 libcorosync-common4-dbgsym libcpg-dev libcpg4 libcpg4-dbgsym libquorum-dev libquorum5 libquorum5-dbgsym libsam-dev libsam4 libsam4-dbgsym libvotequorum-dev libvotequorum8 libvotequorum8-dbgsym Architecture: ppc64el Version: 3.1.7-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Ferenc Wágner Description: corosync - cluster engine daemon and utilities corosync-notifyd - cluster engine notification daemon corosync-vqsim - cluster engine votequorum simulator libcfg-dev - cluster engine CFG library development libcfg7 - cluster engine CFG library libcmap-dev - cluster engine CMAP library development libcmap4 - cluster engine CMAP library libcorosync-common-dev - cluster engine common development libcorosync-common4 - cluster engine common library libcpg-dev - cluster engine CPG library development libcpg4 - cluster engine CPG library libquorum-dev - cluster engine Quorum library development libquorum5 - cluster engine Quorum library libsam-dev - cluster engine SAM library development libsam4 - cluster engine SAM library libvotequorum-dev - cluster engine Votequorum library development libvotequorum8 - cluster engine Votequorum library Closes: 1133837 1133838 Changes: corosync (3.1.7-1+deb12u2) bookworm-security; urgency=high . * [809a6e8] New patch: totemsrp: Return error if sanity check fails. Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838) * [70d459c] New patch: totemsrp: Fix integer overflow in memb_join_sanity. Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837) Checksums-Sha1: ae779bf7fcedc93035b00e2d742170f8a17e2f90 764088 corosync-dbgsym_3.1.7-1+deb12u2_ppc64el.deb ab8541c7a2458fefd296b5914f94573b63b075bd 123356 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 052fec44bc7fd3d54374a76efc1c3708bb9886ff 267284 corosync-notifyd_3.1.7-1+deb12u2_ppc64el.deb aba8dbf5f65a9f9a47865c6eb7511a86412b0feb 280876 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 936a60994d3d262a1790b7e7b1e7a971f363a586 313244 corosync-vqsim_3.1.7-1+deb12u2_ppc64el.deb ed21e02753085df1946ff701df6f0bc5a184e6bd 15848 corosync_3.1.7-1+deb12u2_ppc64el-buildd.buildinfo ec7a0c109e03dd47f8a138d95046d0e1c105873d 510628 corosync_3.1.7-1+deb12u2_ppc64el.deb 81e79fa1594133554f1a7f0e83f3c2ffbd95f796 252992 libcfg-dev_3.1.7-1+deb12u2_ppc64el.deb 5c8fa0ce182bf19da17db8b30c17f4260190dc71 61620 libcfg7-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 4a3f7820c8ad71644681324e5a2c030042f7cbc4 256464 libcfg7_3.1.7-1+deb12u2_ppc64el.deb ff999f0c7079301b60cbb572f24e95e0d09b0403 285124 libcmap-dev_3.1.7-1+deb12u2_ppc64el.deb 91fb7aa63b5355db902093ffc3a33580224d263a 67596 libcmap4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 7f3d33d0d136f301675da5553e83d4ea397302e7 258604 libcmap4_3.1.7-1+deb12u2_ppc64el.deb 5b10b21331b066a599408b13415d5b4ab2d2cc02 253528 libcorosync-common-dev_3.1.7-1+deb12u2_ppc64el.deb fd88bcfd655645bfae0bc2ac03185ca479c559f5 20300 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb fe2c57331f271729904c8fdd1a47d1edb1fa3957 253160 libcorosync-common4_3.1.7-1+deb12u2_ppc64el.deb 72679aedeb8b7c4aca7e3d048d375641c79814b5 289360 libcpg-dev_3.1.7-1+deb12u2_ppc64el.deb f7b3e5d3238409d57e756b3dc0d199ab2164e0fc 80772 libcpg4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb a4414952141bc6349ee79f377bc2da521c2e7609 260352 libcpg4_3.1.7-1+deb12u2_ppc64el.deb 4ca43816836139f6ba21e831b8bd46273e369614 271604 libquorum-dev_3.1.7-1+deb12u2_ppc64el.deb 68647ef163c2822d46848a16a34f53d8cd170efa 53240 libquorum5-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 05649dead02f94e7629ffc461da8166cc0ee3d23 255052 libquorum5_3.1.7-1+deb12u2_ppc64el.deb ba977a1a59792363541ee4e06e1eaee9e6feb810 278096 libsam-dev_3.1.7-1+deb12u2_ppc64el.deb ce7f856582bc68c28c86bf34571c2c2abe82504a 74080 libsam4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb a997612ea0c7bfa9b0c02b3d251b5ff11fb89214 259324 libsam4_3.1.7-1+deb12u2_ppc64el.deb 0d92652cf4f032595357de009a399ac54e4b55a7 283688 libvotequorum-dev_3.1.7-1+deb12u2_ppc64el.deb 14881932bfe02acdf104793d48553af98d83e785 57072 libvotequorum8-dbgsym_3.1.7-1+deb12u2_ppc64el.deb e203476da12ebfff435e121e39a249d7d3231f3c 255888 libvotequorum8_3.1.7-1+deb12u2_ppc64el.deb Checksums-Sha256: 93820e2e3f8c69d1ba02187685553c51529dae41fc7fe3597ea0ef6490710c22 764088 corosync-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 2dd2bf40ec20b2a4dfde648b379c6c7ec772d41a90d6e26411940f969f28f48b 123356 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 597fbe9e162061948d67d01091074a9060c4bfb93ee1b203ef6b2ecd892452ab 267284 corosync-notifyd_3.1.7-1+deb12u2_ppc64el.deb fc5359d214a6f9b17508ee9baab38612e95e1f7461d2c4ad9772040270e3f09a 280876 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 829331352d28b425c2785f632a9d2a466a62c5ee2894598cb249fda9be941b4b 313244 corosync-vqsim_3.1.7-1+deb12u2_ppc64el.deb 1197dbc6fcc4342a2946627fb6ab9b5ddc40608a766470f204ac6ec590617e20 15848 corosync_3.1.7-1+deb12u2_ppc64el-buildd.buildinfo a69c1fc556ff9d51b4b72ab2acc5515711994679a38ccd8c224702dfe8027d83 510628 corosync_3.1.7-1+deb12u2_ppc64el.deb 814cd550e4dea53dc18a7283ae71da42bb1206c9f241b5bdf3686ff9539971d4 252992 libcfg-dev_3.1.7-1+deb12u2_ppc64el.deb 6045fb044c17ece3135750515d582ebb64a82b0666f26d951e9b1bc361e9b59e 61620 libcfg7-dbgsym_3.1.7-1+deb12u2_ppc64el.deb e677d3d5e2dcf02827bdea6eb43d319ebce6e91a531a5453461e96f6d105b1ef 256464 libcfg7_3.1.7-1+deb12u2_ppc64el.deb 461cb707afb37655de1135066e935348f17ac09aa0095b40274b0e1471421472 285124 libcmap-dev_3.1.7-1+deb12u2_ppc64el.deb 857d94db12c7cbd05576ca1ef62c4bb8a1de1817a533636753de1eed0a3a365d 67596 libcmap4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 2acb35afc58733809cacb75da87c00af279cb81cfb24fb3aa1cb85ab8b867128 258604 libcmap4_3.1.7-1+deb12u2_ppc64el.deb 6d7ab934e5d952eed097c58c5b0229c016d5228f7af1cdb5b4d347c7bf77dfc1 253528 libcorosync-common-dev_3.1.7-1+deb12u2_ppc64el.deb c71a0bff13c8c98a05c316a8986aa9f511cb3a3674f0da604b8ca12d339014cd 20300 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 2ef295b07432cb16c513ff8878286c1e58b65159369d7bd6c7b9f81c625cdca8 253160 libcorosync-common4_3.1.7-1+deb12u2_ppc64el.deb c62af154cc41795a086a82d489f5d8ba0db8a0ddb5c9cab75e03360a9dc37584 289360 libcpg-dev_3.1.7-1+deb12u2_ppc64el.deb d701011187192053bad2f5ce85ee37d08fa4c72619e0697ceb6a1d4bdc34e7a1 80772 libcpg4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 799f318a4d6fa92892800f19b47b8943d26edcdb3599ca8374b6b80f786fde1b 260352 libcpg4_3.1.7-1+deb12u2_ppc64el.deb 7ab6bb967eab72072d7d5f34200d826b76e0f0a920967c84a04c4b8bd2738b3f 271604 libquorum-dev_3.1.7-1+deb12u2_ppc64el.deb 5044fc5bb07f08a9ae70989badbe9603bf40a68e3018418ce37f5c3a46020bb9 53240 libquorum5-dbgsym_3.1.7-1+deb12u2_ppc64el.deb f10d4e921b6a94bafca292c8437fcfa78aafaa5d31ad8ade8cd6a1a17ef28702 255052 libquorum5_3.1.7-1+deb12u2_ppc64el.deb 90e40cf63e7fa7338fca64468f2ffcad042c8797465c88264a41d2961a7d8d4c 278096 libsam-dev_3.1.7-1+deb12u2_ppc64el.deb d1ede6dad9b5a3d7b6e6c6db75d403753a44e4faabd5802226c9c22414a64157 74080 libsam4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb ea84925d02760da6dce0eef0e5adea9e1dd8eda6a7abf2b071b83433cbc23136 259324 libsam4_3.1.7-1+deb12u2_ppc64el.deb 809db9a00a8340feda74d2ad38f591a4323917a2b616545cd1a825b44bd38a36 283688 libvotequorum-dev_3.1.7-1+deb12u2_ppc64el.deb 7d3d24f84f1a0ecb9fd81adb2241d17af2344a92d07de3c1734f09fd4ac5677b 57072 libvotequorum8-dbgsym_3.1.7-1+deb12u2_ppc64el.deb d0a478d897ab314252947c4f1cba67e8f646b9fd6c8667fc2c015be5b53ebe55 255888 libvotequorum8_3.1.7-1+deb12u2_ppc64el.deb Files: f2624345e0757b524151b468b53da5b9 764088 debug optional corosync-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 4ee548da134d20e8c48b8a115d13caaf 123356 debug optional corosync-notifyd-dbgsym_3.1.7-1+deb12u2_ppc64el.deb f6943d54fb1280686b9df6a53d38d3d8 267284 admin optional corosync-notifyd_3.1.7-1+deb12u2_ppc64el.deb 114cafa53948e95c6829c57674b7b05b 280876 debug optional corosync-vqsim-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 24228d960c916714e4b9709624553440 313244 admin optional corosync-vqsim_3.1.7-1+deb12u2_ppc64el.deb c29f7993e62e3135817bde4de31ad55f 15848 admin optional corosync_3.1.7-1+deb12u2_ppc64el-buildd.buildinfo 5f50361ba37539914bfce1ca93c36518 510628 admin optional corosync_3.1.7-1+deb12u2_ppc64el.deb 936acd1933525f1dd98f2e732fdc4f27 252992 libdevel optional libcfg-dev_3.1.7-1+deb12u2_ppc64el.deb ac02740c1a4faf4455220681f22914f6 61620 debug optional libcfg7-dbgsym_3.1.7-1+deb12u2_ppc64el.deb db5d029506d14c72e606abcdd0f63019 256464 libs optional libcfg7_3.1.7-1+deb12u2_ppc64el.deb b03d3a555594812ed258e8b83d1a304d 285124 libdevel optional libcmap-dev_3.1.7-1+deb12u2_ppc64el.deb 2dc78e211e0f0f4edb66530ab117f3c5 67596 debug optional libcmap4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 7bcbf00b69af5fe5e5b280e7f8dd540d 258604 libs optional libcmap4_3.1.7-1+deb12u2_ppc64el.deb 5668e4d4742e2ca1e724a715deba9a6a 253528 libdevel optional libcorosync-common-dev_3.1.7-1+deb12u2_ppc64el.deb f9be51af374c5b33b405ebe13cd7f8e8 20300 debug optional libcorosync-common4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 8b89b8f976575e7909cb0d9ea37e6db2 253160 libs optional libcorosync-common4_3.1.7-1+deb12u2_ppc64el.deb f150bcbc9fb7a62f85251f65b871e244 289360 libdevel optional libcpg-dev_3.1.7-1+deb12u2_ppc64el.deb 54d990bb1c1a009b6c35f6aba5f54446 80772 debug optional libcpg4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 39b639fa79fa1e381eedde58492ee32a 260352 libs optional libcpg4_3.1.7-1+deb12u2_ppc64el.deb d8c029b95e028a08708285057d596d08 271604 libdevel optional libquorum-dev_3.1.7-1+deb12u2_ppc64el.deb 3a343dd4a9526f1714e18936d9395370 53240 debug optional libquorum5-dbgsym_3.1.7-1+deb12u2_ppc64el.deb 68ee6cc28b7ec4eaa7ce1d8084724e65 255052 libs optional libquorum5_3.1.7-1+deb12u2_ppc64el.deb 305ddf4132978ee25749e654cffe5e74 278096 libdevel optional libsam-dev_3.1.7-1+deb12u2_ppc64el.deb b76dd1f1af88bb1d4d5e849126325205 74080 debug optional libsam4-dbgsym_3.1.7-1+deb12u2_ppc64el.deb e09dfc2b4cd6c9e0173bd352b02d5d6e 259324 libs optional libsam4_3.1.7-1+deb12u2_ppc64el.deb b887a6c98f2c0dfd9fac95e5b6727eb7 283688 libdevel optional libvotequorum-dev_3.1.7-1+deb12u2_ppc64el.deb e99f198299d395f5ce5fec586efe7cd0 57072 debug optional libvotequorum8-dbgsym_3.1.7-1+deb12u2_ppc64el.deb aaefb5e3061113de5f8f30991a56c5ca 255888 libs optional libvotequorum8_3.1.7-1+deb12u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmn+O3EACgkQ2FRWNm40 e2Z5og/+KHZ5w/WM9YBN0507hYU7nfu3xJj+WPbrHySQ/ydiOs0QbWynJrgDcncV AEur5WeGEGzPfvcabnYisq006+Z9K3PPxfb5iHVyuJu0U7eiEaSiFf9xTHQnX6g0 MNXUQf9xdMsKxdLEhhkp2K280EScuiNyZdieQq1mlJy6GhMYQFcxlDYCWX8Y/5v5 i/xzzrNWVDuYojrN4X/2HjURb/H1Z/sAjkhAxvohKXiXqZ3P7pxFgyyr5gSn3j0W LBSyyNe92YaRIuy+3w75HIM0EyP9NnKattAjiJiaWZwMY8SdgA/D8r0knnckStaA NOkugjVwgrhCCRRSxgMmuvRQ7YgsrJaFjo2DuoLCxC0I98mXkqXDkGLST8v+uwRz NkMb2XyhouMT/5jxqXEqMRsBPh8gMVju4USvxAHfmPmRtJ8fQVODnLv5A86wvY9r I8jZRxdB63nqWQmoFBR+3oIbTEjFoUdMVSAJBFQLk7zevEzqFd9Sj6emGPqmEPo2 FovG8Z6iMnQjUsrgTcjwZi1kcTC0dvXdxDkGzBklFnsQxyZRg2KRIoMgjYRhwXIJ Idk2rllMXpe+P7mHPNwVA9dTQ04LIk1VW2FJhZbpmRQZqSAequyi5coqsBU3DaCt F49pkaIhIMfyReQ4FBqTECecAxJre4dGZFfpHjql/dPVYYhfgkg= =yvGc -----END PGP SIGNATURE-----