-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 May 2026 22:36:24 +0200 Source: corosync Binary: corosync corosync-dbgsym corosync-notifyd corosync-notifyd-dbgsym corosync-vqsim corosync-vqsim-dbgsym libcfg-dev libcfg7 libcfg7-dbgsym libcmap-dev libcmap4 libcmap4-dbgsym libcorosync-common-dev libcorosync-common4 libcorosync-common4-dbgsym libcpg-dev libcpg4 libcpg4-dbgsym libquorum-dev libquorum5 libquorum5-dbgsym libsam-dev libsam4 libsam4-dbgsym libvotequorum-dev libvotequorum8 libvotequorum8-dbgsym Architecture: amd64 Version: 3.1.9-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Ferenc Wágner Description: corosync - cluster engine daemon and utilities corosync-notifyd - cluster engine notification daemon corosync-vqsim - cluster engine votequorum simulator libcfg-dev - cluster engine CFG library development libcfg7 - cluster engine CFG library libcmap-dev - cluster engine CMAP library development libcmap4 - cluster engine CMAP library libcorosync-common-dev - cluster engine common development libcorosync-common4 - cluster engine common library libcpg-dev - cluster engine CPG library development libcpg4 - cluster engine CPG library libquorum-dev - cluster engine Quorum library development libquorum5 - cluster engine Quorum library libsam-dev - cluster engine SAM library development libsam4 - cluster engine SAM library libvotequorum-dev - cluster engine Votequorum library development libvotequorum8 - cluster engine Votequorum library Closes: 1133837 1133838 Changes: corosync (3.1.9-2+deb13u1) trixie-security; urgency=high . * [128a6c1] New patch: totemsrp: Return error if sanity check fails. Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838) * [f46d7eb] New patch: totemsrp: Fix integer overflow in memb_join_sanity. Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837) Checksums-Sha1: 9977120e5abb8199f1fb1fa2aeb53863cc418009 744084 corosync-dbgsym_3.1.9-2+deb13u1_amd64.deb 6a9249a980bc75fd6b2d8cf4d4aeaed237646b15 119920 corosync-notifyd-dbgsym_3.1.9-2+deb13u1_amd64.deb e74eb7bedaeb59e4539e77468a8298873ef53d9b 272260 corosync-notifyd_3.1.9-2+deb13u1_amd64.deb 58b253bc15694a5f08ffb084056fc88c94d6f393 273176 corosync-vqsim-dbgsym_3.1.9-2+deb13u1_amd64.deb d6570ed995293bc5686b912877bafcd4be0f3168 312540 corosync-vqsim_3.1.9-2+deb13u1_amd64.deb 301de83befb683a671b4c83aea73aa9de0bc71f2 15285 corosync_3.1.9-2+deb13u1_amd64-buildd.buildinfo e1723b46cf1b20e2a2938b57d4626b0cd39b63c5 503540 corosync_3.1.9-2+deb13u1_amd64.deb 35ac20026254227dde06220274f92373c07c4f23 257392 libcfg-dev_3.1.9-2+deb13u1_amd64.deb 71cda2a138743d57ec79361d385bdb06c92841a7 62492 libcfg7-dbgsym_3.1.9-2+deb13u1_amd64.deb 28d51780bf562c16f58053beaa4a40dbeddaa4d6 260356 libcfg7_3.1.9-2+deb13u1_amd64.deb 0d74dca19e1aa6bea089e3be93542adeabdf9243 289536 libcmap-dev_3.1.9-2+deb13u1_amd64.deb 8a74abdcdce1f13a02befcc75b47fe20ea8ee8b6 68460 libcmap4-dbgsym_3.1.9-2+deb13u1_amd64.deb 8887525e885a582cf0bd4bb2b7defc460a48662b 262204 libcmap4_3.1.9-2+deb13u1_amd64.deb dd673b93594bbf766b7349a1b1b200e366b55348 257960 libcorosync-common-dev_3.1.9-2+deb13u1_amd64.deb bbcd2b2bf94ffe210779fced9796cde089040dc1 20320 libcorosync-common4-dbgsym_3.1.9-2+deb13u1_amd64.deb 16799118418c6ca535cef3f927a2c4015903030f 257376 libcorosync-common4_3.1.9-2+deb13u1_amd64.deb f9d65598d4c797ad01483f675fc962eb95b5f288 293756 libcpg-dev_3.1.9-2+deb13u1_amd64.deb eed86a0956d347c8810b7985a43dce6b40c1e465 81484 libcpg4-dbgsym_3.1.9-2+deb13u1_amd64.deb 29372e174da311b7e91409ca24221362dbf36812 263692 libcpg4_3.1.9-2+deb13u1_amd64.deb 8609fa7c948eb7edd8d2387dc29449dab3757d09 276040 libquorum-dev_3.1.9-2+deb13u1_amd64.deb 97b8accf1d63cbf8560ed6e2eeb8c1d530838c40 54044 libquorum5-dbgsym_3.1.9-2+deb13u1_amd64.deb d245de47441b47878dfe04a56d35547068a0725f 259256 libquorum5_3.1.9-2+deb13u1_amd64.deb 9de71a7d005e4dfb8f6d6d13e029b0efb8b3a22b 282520 libsam-dev_3.1.9-2+deb13u1_amd64.deb 7b2588e0b3fa139eb90b38340a6fc635113bc75b 69196 libsam4-dbgsym_3.1.9-2+deb13u1_amd64.deb 0aad595fdd052067484ed8b8f16d051cecbb12e5 263176 libsam4_3.1.9-2+deb13u1_amd64.deb b050c55458c8760a29320ade47828736b9cb364b 288060 libvotequorum-dev_3.1.9-2+deb13u1_amd64.deb 89dedba12cdd8710fd3914d5930a28c442574738 57944 libvotequorum8-dbgsym_3.1.9-2+deb13u1_amd64.deb b265ddba7b1d4b633fc21047cce6068e134c2417 260080 libvotequorum8_3.1.9-2+deb13u1_amd64.deb Checksums-Sha256: d0d874350ff5b022f8e53a4ccb597a921eaa46e938f02a16cf13c5c269dceb8a 744084 corosync-dbgsym_3.1.9-2+deb13u1_amd64.deb bffd3f0e97617b02821f2990cda1016ac1d30bc20d2db7525bb9837c431d2c63 119920 corosync-notifyd-dbgsym_3.1.9-2+deb13u1_amd64.deb 538ea1230205c1c1515d636536192d0098d41f9bd89de9503ec752b9182aa32c 272260 corosync-notifyd_3.1.9-2+deb13u1_amd64.deb 63f035a7b5845d8d2f06ef3c0938b78bec4569d2cea506bb4481752834885c62 273176 corosync-vqsim-dbgsym_3.1.9-2+deb13u1_amd64.deb 9bf5a955d4b8347aa2d3dce8111eef11c40152d0538b9b8511719a3e2a38fead 312540 corosync-vqsim_3.1.9-2+deb13u1_amd64.deb f17a054bbd74807614003a7672e2baea429dac69175bfb7968c8160406f78f3c 15285 corosync_3.1.9-2+deb13u1_amd64-buildd.buildinfo 2fdd7a2ae46bac0c96b9798be47c6d0e8c474a955c1455f00318793c223fa356 503540 corosync_3.1.9-2+deb13u1_amd64.deb a20d53e5c36c08c26136d8c7ed4e08843e72f8c067214326b4256c6516119cc8 257392 libcfg-dev_3.1.9-2+deb13u1_amd64.deb 2e7caede143c91047c6332f60eba318fce984d7a43106a23687544e16a1a3a34 62492 libcfg7-dbgsym_3.1.9-2+deb13u1_amd64.deb 1aa0aaea385d8a2dea52a7959e57f5dc0b32b29245ffe9d31c50f8ce7c5d09eb 260356 libcfg7_3.1.9-2+deb13u1_amd64.deb 12f123f40f2eabd2546a462a22df970e3b3057419746dd0aa5216d9904d0fd81 289536 libcmap-dev_3.1.9-2+deb13u1_amd64.deb cbff9689448b14eb051a26c7a1b8b1e2ea4991212995f37e2e0677dec647cbbf 68460 libcmap4-dbgsym_3.1.9-2+deb13u1_amd64.deb 39da5c4f93470ea4d482117ea93b0bb7993430584f32b5de5dee894712e1b729 262204 libcmap4_3.1.9-2+deb13u1_amd64.deb ef1e7a727742cf1a7c216b715f9cd19682503b0db83376b1a57a313ef8e656f7 257960 libcorosync-common-dev_3.1.9-2+deb13u1_amd64.deb 7ce0f2dc92b9cf70eacbf898ad19615ed65082b81812ba8863ff393c7ba2efbe 20320 libcorosync-common4-dbgsym_3.1.9-2+deb13u1_amd64.deb f00cb7dd3ed155c0b5712149c49549d2d6b4fe335dbcf6c892c6d0048feb0474 257376 libcorosync-common4_3.1.9-2+deb13u1_amd64.deb 6641cf5190a3dcffdf510ab93d66dc980084733ba705cab1c8ca6e80f180d0bd 293756 libcpg-dev_3.1.9-2+deb13u1_amd64.deb d6e010909b0573ae441a473db098153863f50077cec4a1cbb1f0385c46c97147 81484 libcpg4-dbgsym_3.1.9-2+deb13u1_amd64.deb d947b6d3877dd6bb22a51a62435e89b1225ae9121756227affc1fee6eb912d5b 263692 libcpg4_3.1.9-2+deb13u1_amd64.deb aeb2cdab2586de53ca6369936bdfab877555d330bd102958868a9d1ff0dc15a6 276040 libquorum-dev_3.1.9-2+deb13u1_amd64.deb 835442b5926cc314a90ed308bc0d40185b66c9cffaa32e717b2c8ad537f41470 54044 libquorum5-dbgsym_3.1.9-2+deb13u1_amd64.deb 41490b4495594e5aef7e78eb85c99b818a39628ce8ee299f3b36ef62473dbb8b 259256 libquorum5_3.1.9-2+deb13u1_amd64.deb 763247b64cf5a06e109a99f1aaeed2906bb93c8ae041e7761c5fd10c20b57c1c 282520 libsam-dev_3.1.9-2+deb13u1_amd64.deb 6865381b2ad9dc610f7f9e62efbc507c4ec35a7a401991b5b23e20ca8b603841 69196 libsam4-dbgsym_3.1.9-2+deb13u1_amd64.deb 93e0b8f6a0ac3d0d7fa7a82aa29f855d169695249bf811f3ace7e67787192b54 263176 libsam4_3.1.9-2+deb13u1_amd64.deb 7a454179b0c148c2176a5499073ac907ece25eb2c6efb236a33185905d0bbbf5 288060 libvotequorum-dev_3.1.9-2+deb13u1_amd64.deb 231ccc95161d7753bccb7d699851619463e02564373195ab0e678b1fc125f04f 57944 libvotequorum8-dbgsym_3.1.9-2+deb13u1_amd64.deb cbe33b8c9248010c95a05593d89e0b1240babe2c71bf611bb21a5e96c2f8c150 260080 libvotequorum8_3.1.9-2+deb13u1_amd64.deb Files: d6536f9f22e2f38ea2deaa2a7be971b4 744084 debug optional corosync-dbgsym_3.1.9-2+deb13u1_amd64.deb 836e60ce3d5bf7f4485f2874513cdd87 119920 debug optional corosync-notifyd-dbgsym_3.1.9-2+deb13u1_amd64.deb 3e4b569abc9143332fac7f1814d54f49 272260 admin optional corosync-notifyd_3.1.9-2+deb13u1_amd64.deb d549ae20ea53e54237b203f004af766a 273176 debug optional corosync-vqsim-dbgsym_3.1.9-2+deb13u1_amd64.deb 540b1c8966dffae7d87c755de36c0779 312540 admin optional corosync-vqsim_3.1.9-2+deb13u1_amd64.deb d401ec47ec8b78b25c107f8096607d08 15285 admin optional corosync_3.1.9-2+deb13u1_amd64-buildd.buildinfo b0cd2e882a6a27749665eda8d63185cc 503540 admin optional corosync_3.1.9-2+deb13u1_amd64.deb 2890334c3f0ea7705997bd07ab02073b 257392 libdevel optional libcfg-dev_3.1.9-2+deb13u1_amd64.deb df57abc96fc3dd35f46e74b1fe63095b 62492 debug optional libcfg7-dbgsym_3.1.9-2+deb13u1_amd64.deb 8352eb95d73d2cbbf210de3a9ff7445c 260356 libs optional libcfg7_3.1.9-2+deb13u1_amd64.deb 45523b1e96e4ea189c4739c4822d551a 289536 libdevel optional libcmap-dev_3.1.9-2+deb13u1_amd64.deb 40e58b8919e1932c0f4d488778272ee8 68460 debug optional libcmap4-dbgsym_3.1.9-2+deb13u1_amd64.deb a9ecef8f47f9c73df4e983bce265d7c1 262204 libs optional libcmap4_3.1.9-2+deb13u1_amd64.deb 873d413bce22b9b8bdcd5b024562d7dd 257960 libdevel optional libcorosync-common-dev_3.1.9-2+deb13u1_amd64.deb a5d8638ff19b798fc899d4adf8162322 20320 debug optional libcorosync-common4-dbgsym_3.1.9-2+deb13u1_amd64.deb 8600a00ed4a62b5a8688e2c6be654c43 257376 libs optional libcorosync-common4_3.1.9-2+deb13u1_amd64.deb 5dc5510ed3495191ecc84f7c642ca6a4 293756 libdevel optional libcpg-dev_3.1.9-2+deb13u1_amd64.deb 0ad6af5650262d66b7f791d6a8a92229 81484 debug optional libcpg4-dbgsym_3.1.9-2+deb13u1_amd64.deb c0495fe9046c8663faec12d592e54056 263692 libs optional libcpg4_3.1.9-2+deb13u1_amd64.deb e9b28019a1f15ef8f387109173cf9ca7 276040 libdevel optional libquorum-dev_3.1.9-2+deb13u1_amd64.deb e1fd4e55d5dbca1922aa4b2259f7a848 54044 debug optional libquorum5-dbgsym_3.1.9-2+deb13u1_amd64.deb cbb26c4bc8a192082bda7607762add17 259256 libs optional libquorum5_3.1.9-2+deb13u1_amd64.deb 96948c413d32c5a372c3112ca7a3f7ba 282520 libdevel optional libsam-dev_3.1.9-2+deb13u1_amd64.deb 675fe80601b22859c539d7a24655d4be 69196 debug optional libsam4-dbgsym_3.1.9-2+deb13u1_amd64.deb 2b2d12949ca040086bde24b2218ec99d 263176 libs optional libsam4_3.1.9-2+deb13u1_amd64.deb a57e61ab9803ff906b76405c3f59352e 288060 libdevel optional libvotequorum-dev_3.1.9-2+deb13u1_amd64.deb 317f0a88f0d0cbdf7245b2c54a90a42c 57944 debug optional libvotequorum8-dbgsym_3.1.9-2+deb13u1_amd64.deb e4848a96d22b5014db93b86e4e676678 260080 libs optional libvotequorum8_3.1.9-2+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmn+O8MACgkQYg9P9sm2 dfEu6g//cOmzviWR2+/OtCgIRl83Bxu3ApSZ8CmYlZTjSoK4DxTw9vpwjOZeWLij h4qWMa8Yo1H+xIIvPwiSFio2VvjPmjwW5ngPaUs+x2xTvuc8FL34mmxy4hQUbAtj oyuInHP6MGVn1sXRvxNmUFz9Bp5Z5ZTBO5Q250Dht6Zz6CC5mNRxBO65lu1LCigo QvTuSKPxCpOpTo3q3pmZCfRhZBYXhZ5efxJ4Ehf2cEku8XA4dYcjTj5PU7kPfboG eJLxeL8Z3QBbfs7sMhhAw5xp3/OOzpfSXKFfqG8h6IDvwVRaNXvVMwJJPQG6c7O3 kAjCCsaIiEX9Gd98ZwdNczMaZ7WjxS3ddLC7acX0XnO7ZUzZhH0XVP59QuK/yR4z OwqLGB6itowubvK1sTWFqrNPcPc3Axz+0AEi9ELGBReFBFDQZLRoz0qXdR3gKLAB JtwJBzHvYw0mn1SY4GVBJhL2uyLM2rkPDNwRI7UrSz6DyvmkzWRs2mWwDXEr9cKU ehfmprbAJRB6+7MYwmz+cBOC/lLca40TTnMCWVpWKi3oqt/Qy8aOaeo6MKZsPX3t 2eRa9WqJfVT16cDHrA3j7GIY7biAAPLbtP7oYYzm0EAWLAG39zijKNq7PQ7EXKqm K888Q1MwvSNz0JPZpmiEtEWThTs3G9ZMgnbrFaBtuAY7A8fWyyo= =LshV -----END PGP SIGNATURE-----