-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 May 2026 23:24:43 +0200
Source: corosync
Binary: corosync corosync-dbgsym corosync-notifyd corosync-notifyd-dbgsym corosync-vqsim corosync-vqsim-dbgsym libcfg-dev libcfg7 libcfg7-dbgsym libcmap-dev libcmap4 libcmap4-dbgsym libcorosync-common-dev libcorosync-common4 libcorosync-common4-dbgsym libcpg-dev libcpg4 libcpg4-dbgsym libquorum-dev libquorum5 libquorum5-dbgsym libsam-dev libsam4 libsam4-dbgsym libvotequorum-dev libvotequorum8 libvotequorum8-dbgsym
Architecture: arm64
Version: 3.1.7-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Ferenc Wágner <wferi@debian.org>
Description:
 corosync   - cluster engine daemon and utilities
 corosync-notifyd - cluster engine notification daemon
 corosync-vqsim - cluster engine votequorum simulator
 libcfg-dev - cluster engine CFG library development
 libcfg7    - cluster engine CFG library
 libcmap-dev - cluster engine CMAP library development
 libcmap4   - cluster engine CMAP library
 libcorosync-common-dev - cluster engine common development
 libcorosync-common4 - cluster engine common library
 libcpg-dev - cluster engine CPG library development
 libcpg4    - cluster engine CPG library
 libquorum-dev - cluster engine Quorum library development
 libquorum5 - cluster engine Quorum library
 libsam-dev - cluster engine SAM library development
 libsam4    - cluster engine SAM library
 libvotequorum-dev - cluster engine Votequorum library development
 libvotequorum8 - cluster engine Votequorum library
Closes: 1133837 1133838
Changes:
 corosync (3.1.7-1+deb12u2) bookworm-security; urgency=high
 .
   * [809a6e8] New patch: totemsrp: Return error if sanity check fails.
     Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838)
   * [70d459c] New patch: totemsrp: Fix integer overflow in memb_join_sanity.
     Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837)
Checksums-Sha1:
 e97e3794fe02546c8ea6e9f9060d59d11b4e10bc 741584 corosync-dbgsym_3.1.7-1+deb12u2_arm64.deb
 44fec09eaa46071fd43c2108fba4c8b28f071ec2 118596 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_arm64.deb
 81d80ef7a8036f158e468fe1d9c4a16a4be72b84 266596 corosync-notifyd_3.1.7-1+deb12u2_arm64.deb
 4c9ae8aa5e119d670c6ddfcbb6cb8a26a09c52ea 272304 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_arm64.deb
 2e1778cc7abed923b0f00be77719097bc7977f90 303180 corosync-vqsim_3.1.7-1+deb12u2_arm64.deb
 da0e7b5b1833e1f07f189dc4ffd17fb62ed5373f 15701 corosync_3.1.7-1+deb12u2_arm64-buildd.buildinfo
 5ad91f2873834458c679716a86fdd5c3de91d63f 479824 corosync_3.1.7-1+deb12u2_arm64.deb
 28edeae6953465593c83fadee8c82e86f85bfaa5 252984 libcfg-dev_3.1.7-1+deb12u2_arm64.deb
 b014c56afbec9d05dca3b9d395039f3c0b4e0906 60988 libcfg7-dbgsym_3.1.7-1+deb12u2_arm64.deb
 eb2bcb053ba44f9f6da55da2c2c6097b7d645b47 255896 libcfg7_3.1.7-1+deb12u2_arm64.deb
 3d03131dd96073fe87df669a6b4da00be6152139 285120 libcmap-dev_3.1.7-1+deb12u2_arm64.deb
 fa2e795bf589aa9df788cca31ed606dc4e7be909 66956 libcmap4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 2537864275d34fb11914649b1dce7d3af93bfb1e 257640 libcmap4_3.1.7-1+deb12u2_arm64.deb
 18b29830ed8e4fc6538d4273d1ef01320aa05e2d 253524 libcorosync-common-dev_3.1.7-1+deb12u2_arm64.deb
 065ab2157cc790b7ff179a0861d95305e74d0a81 20304 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 e3fa730110cb472fb1165efdfb8f0c7e0e63e391 253052 libcorosync-common4_3.1.7-1+deb12u2_arm64.deb
 8ebcd75715518aac279d43584e88654a6e7099bf 289356 libcpg-dev_3.1.7-1+deb12u2_arm64.deb
 59ca11f0eb2b8fe795bd297fccf04b450c77a222 79392 libcpg4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 20ec540b65502efd4c1bf65f16b00ef5566fe9ba 259084 libcpg4_3.1.7-1+deb12u2_arm64.deb
 98c8a5073fd4aec291cad799446210b28ce2e654 271608 libquorum-dev_3.1.7-1+deb12u2_arm64.deb
 669bd05ed6339e292740e116e297b09418b10ff7 52496 libquorum5-dbgsym_3.1.7-1+deb12u2_arm64.deb
 7affe3fc58b6f17ffd50c8aed0e6853df40eeebb 254664 libquorum5_3.1.7-1+deb12u2_arm64.deb
 8ff6411204e814839075447df776dcbf11eb005a 278080 libsam-dev_3.1.7-1+deb12u2_arm64.deb
 0914949a6eff5abc2d966fb0d6b349d0578a1cce 69580 libsam4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 825d985c45130f02a8448e20b7baf403cbcd459f 258248 libsam4_3.1.7-1+deb12u2_arm64.deb
 57e7e65d3e9b0c7b0305eba698147945bc5a0b2e 283676 libvotequorum-dev_3.1.7-1+deb12u2_arm64.deb
 93a80dba6b1e12bab0ea6b24793c0cb4e48534a0 56436 libvotequorum8-dbgsym_3.1.7-1+deb12u2_arm64.deb
 c1ade1d81cd37373eb0f014f3bb7019877cf21f7 255488 libvotequorum8_3.1.7-1+deb12u2_arm64.deb
Checksums-Sha256:
 e9a7ee7afb0daa941c331dcba00d2bf4b818e41ef33355640db19ef43a755d90 741584 corosync-dbgsym_3.1.7-1+deb12u2_arm64.deb
 1ab3260f051fd654212644187b3929bc9e0948b6fd1ceba4820a78990f0bb8a5 118596 corosync-notifyd-dbgsym_3.1.7-1+deb12u2_arm64.deb
 6256b6f8913b7f232928a94f1c9873a44a1dac790672a7fbfe449fa6685d611c 266596 corosync-notifyd_3.1.7-1+deb12u2_arm64.deb
 b49432914c22bc0ac1a5d517eedaa8a2ca4502c20a88bdfb789fa34c60cf4108 272304 corosync-vqsim-dbgsym_3.1.7-1+deb12u2_arm64.deb
 2cff0f81c5d313d8c2eedc5b37ac74242176cac8fae82d5043222dc9b80d789a 303180 corosync-vqsim_3.1.7-1+deb12u2_arm64.deb
 4c2bcfe5dafc9dfa96e9baece3f4070a182316604783a304eed910b11e69284b 15701 corosync_3.1.7-1+deb12u2_arm64-buildd.buildinfo
 bcf73cb361dcfc3e24faf553a21303c432b68a60716ec026d287e90542445f73 479824 corosync_3.1.7-1+deb12u2_arm64.deb
 763e969bcc956c488f96c67705e07c8615816751bb5c92f8028461fecd0bdcc0 252984 libcfg-dev_3.1.7-1+deb12u2_arm64.deb
 935dae9c2c01be35cb1f6e791931d140bf6a48b9fbc24e7d8616ae617ab25774 60988 libcfg7-dbgsym_3.1.7-1+deb12u2_arm64.deb
 4f7b9ef0e31369b9c52dadd1452628f5ad62386bc3fa27cd3ef0df73519b5c4c 255896 libcfg7_3.1.7-1+deb12u2_arm64.deb
 a1c1edaf86159b84583adbf5a880ccfcc60186717ea7d4bd4e8b8deb41566e5a 285120 libcmap-dev_3.1.7-1+deb12u2_arm64.deb
 08cafe2cdbcbaabecfbb7c5d112efa16c04b0514ee55ba0cf5789577c94c39a2 66956 libcmap4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 e78ed14d5ba2d35dd500b10edb3b7e90b177f502bb19ccbaf6edf1e5cb03ed1a 257640 libcmap4_3.1.7-1+deb12u2_arm64.deb
 2b4c6f436aed89ff9b99ef4ffa48c7fa9ee1f3b87997f28ba1cd059e319fe0a6 253524 libcorosync-common-dev_3.1.7-1+deb12u2_arm64.deb
 57b7dfd1bd52a6dea90864d3fabcb0a43205481b7f2a2cf558770ed5d8d3254b 20304 libcorosync-common4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 1e63bd9b3544f636196564fcd9c552fa70ae7265d185342bd7c057b139d1e10b 253052 libcorosync-common4_3.1.7-1+deb12u2_arm64.deb
 1819f731782a6d6ee0dd152fa941ea4d1b18ab1cf8a6f2b10304034bfac8d33e 289356 libcpg-dev_3.1.7-1+deb12u2_arm64.deb
 9fb2ffc0383e895d3acbf204dd39706dbc8910363268b380b0ee5cbdd8d27578 79392 libcpg4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 f48ada6047c041cc1750ac83b6beae8b72c499f5908981ac143af423b271217c 259084 libcpg4_3.1.7-1+deb12u2_arm64.deb
 0726cf94e6709dddb793136432b5c8ea91f02f018081e89ee81adf0092b2f9cb 271608 libquorum-dev_3.1.7-1+deb12u2_arm64.deb
 e51ab37420e50781fdc18a0945e8a1adafd97fc0eff247cd402032a77bb7855a 52496 libquorum5-dbgsym_3.1.7-1+deb12u2_arm64.deb
 82cf42748dc39992f29a20b69179d449ae9c7f45b064b533f3a2e2755cbb9b23 254664 libquorum5_3.1.7-1+deb12u2_arm64.deb
 13787f099c0cece7b2ad87561480abc33d67bec4f0cc7ad28db0f0527bf7c349 278080 libsam-dev_3.1.7-1+deb12u2_arm64.deb
 8578acce0ad148e528d4efe28ecff1856a7a4dcb78768fa39cb0e22fa4f18a29 69580 libsam4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 efc5c112c4984ea78916493d49e7c8ae4fc16c955c2b72922e9b2c4a3f6828f1 258248 libsam4_3.1.7-1+deb12u2_arm64.deb
 2709664ad54cf1dcedf93d6531651b01fe7d4b3695835a7c2298ff9d7d8812bd 283676 libvotequorum-dev_3.1.7-1+deb12u2_arm64.deb
 0f86f7359376a900a2c4711b19a001ccb88c5e95df0bd67b6cd5f6edf4a2c7a9 56436 libvotequorum8-dbgsym_3.1.7-1+deb12u2_arm64.deb
 131025e0987be09bcbd382fa0359328867241897a7332b85aac78169617560e9 255488 libvotequorum8_3.1.7-1+deb12u2_arm64.deb
Files:
 0cbe25871baaa80c01d1bec4934e1c99 741584 debug optional corosync-dbgsym_3.1.7-1+deb12u2_arm64.deb
 99009c58207333bbbcbb4ede412adafb 118596 debug optional corosync-notifyd-dbgsym_3.1.7-1+deb12u2_arm64.deb
 12d0a859cca49351046eca90ecc6d2ec 266596 admin optional corosync-notifyd_3.1.7-1+deb12u2_arm64.deb
 42ae946d979d2faa68e37823f91d59f5 272304 debug optional corosync-vqsim-dbgsym_3.1.7-1+deb12u2_arm64.deb
 0218e04463e28459b9c3422cc045af7e 303180 admin optional corosync-vqsim_3.1.7-1+deb12u2_arm64.deb
 2a24dac7d29a8adc5c392f8b89cd3613 15701 admin optional corosync_3.1.7-1+deb12u2_arm64-buildd.buildinfo
 3e6d49cf0b40546d0e4317c7df12e4f3 479824 admin optional corosync_3.1.7-1+deb12u2_arm64.deb
 0c93fabc908f6dd6ed9f11c59a84b76f 252984 libdevel optional libcfg-dev_3.1.7-1+deb12u2_arm64.deb
 9eaf97fcf6e63fea0f3fac05caaeff96 60988 debug optional libcfg7-dbgsym_3.1.7-1+deb12u2_arm64.deb
 4f685614265f634c6558e1380e704486 255896 libs optional libcfg7_3.1.7-1+deb12u2_arm64.deb
 a837f1a5e26649754c08432052993473 285120 libdevel optional libcmap-dev_3.1.7-1+deb12u2_arm64.deb
 4a87a6818310a75d1ec496d161741180 66956 debug optional libcmap4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 be92f1e451b0f3b945ed248fc14192f8 257640 libs optional libcmap4_3.1.7-1+deb12u2_arm64.deb
 8d2bab67cc1c6b57cde3d292868313d8 253524 libdevel optional libcorosync-common-dev_3.1.7-1+deb12u2_arm64.deb
 b3dd5c43f7e8a60e0e8832edaa937807 20304 debug optional libcorosync-common4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 798d7295b6a934b3aaa5514f65df07aa 253052 libs optional libcorosync-common4_3.1.7-1+deb12u2_arm64.deb
 52e439b59a0dc7c88c35704cc3d7ed74 289356 libdevel optional libcpg-dev_3.1.7-1+deb12u2_arm64.deb
 a412f035f661cf1231f6c14ee7f6bc97 79392 debug optional libcpg4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 b66d3b5ec7bbd6a9638ff1d936997276 259084 libs optional libcpg4_3.1.7-1+deb12u2_arm64.deb
 967def90c2f3ce8b07d5d6f1d053eb3f 271608 libdevel optional libquorum-dev_3.1.7-1+deb12u2_arm64.deb
 d8c2e5dc09bc113d9fd8b867e2237aac 52496 debug optional libquorum5-dbgsym_3.1.7-1+deb12u2_arm64.deb
 e17a700eeee366191a566b82a60442d5 254664 libs optional libquorum5_3.1.7-1+deb12u2_arm64.deb
 5d75cbdd3339fd8459fa763023b71371 278080 libdevel optional libsam-dev_3.1.7-1+deb12u2_arm64.deb
 88ecb7d3c874db4e53a0c9ed64db0580 69580 debug optional libsam4-dbgsym_3.1.7-1+deb12u2_arm64.deb
 599f901c60c0f688ee3e36a2e42198d8 258248 libs optional libsam4_3.1.7-1+deb12u2_arm64.deb
 f98495d7523bd1e8810b2e7d9a21ea9a 283676 libdevel optional libvotequorum-dev_3.1.7-1+deb12u2_arm64.deb
 51360c81a251122bc3376c8eaf72fdb6 56436 debug optional libvotequorum8-dbgsym_3.1.7-1+deb12u2_arm64.deb
 1a7f42b8d87445130b4c9391f0f92fab 255488 libs optional libvotequorum8_3.1.7-1+deb12u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=nmaj
-----END PGP SIGNATURE-----