[ubuntu/plucky-proposed] corosync 3.1.8-3ubuntu2 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Thu Mar 27 21:45:35 UTC 2025


corosync (3.1.8-3ubuntu2) plucky; urgency=medium

  * SECURITY UPDATE: stack buffer overflow
    - debian/patches/CVE-2025-30472.patch: check size of orf_token msg in
      exec/totemsrp.c.
    - CVE-2025-30472

Date: Thu, 27 Mar 2025 14:19:58 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/corosync/3.1.8-3ubuntu2
-------------- next part --------------
Format: 1.8
Date: Thu, 27 Mar 2025 14:19:58 -0400
Source: corosync
Built-For-Profiles: noudeb
Architecture: source
Version: 3.1.8-3ubuntu2
Distribution: plucky
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 corosync (3.1.8-3ubuntu2) plucky; urgency=medium
 .
   * SECURITY UPDATE: stack buffer overflow
     - debian/patches/CVE-2025-30472.patch: check size of orf_token msg in
       exec/totemsrp.c.
     - CVE-2025-30472
Checksums-Sha1:
 89fbf6c2dc8ce9e6ec27896c2b2d8c2abaecf433 3602 corosync_3.1.8-3ubuntu2.dsc
 db86cb1479cd87eb3f7cbe521d36d9bb5e3323cb 30980 corosync_3.1.8-3ubuntu2.debian.tar.xz
 520bc0edc04b58dd854012b548e28141a2446949 8044 corosync_3.1.8-3ubuntu2_source.buildinfo
Checksums-Sha256:
 94a1f5194cedfe55e0e89d5b1b0bf718ef96cf7f4b70c9e8ecb573778eddf5c2 3602 corosync_3.1.8-3ubuntu2.dsc
 098b7cc7e74f17bc0090e1eac09f38209fa7082a6abb785c39f7f434a5645f5c 30980 corosync_3.1.8-3ubuntu2.debian.tar.xz
 26485a4bf7c448b8209cdc401a32a40040ee062b1440653947ec1053ca83269f 8044 corosync_3.1.8-3ubuntu2_source.buildinfo
Files:
 452597de9fe9277f0fdf019a7aa4f464 3602 admin optional corosync_3.1.8-3ubuntu2.dsc
 aa2087d83c63b59dfa8c8b11486a2b2e 30980 admin optional corosync_3.1.8-3ubuntu2.debian.tar.xz
 6d220a341fa040658f3f78f7cdff6196 8044 admin optional corosync_3.1.8-3ubuntu2_source.buildinfo
Original-Maintainer: Debian HA Maintainers <debian-ha-maintainers at lists.alioth.debian.org>


More information about the plucky-changes mailing list