[ubuntu/resolute-proposed] corosync 3.1.9-2ubuntu3 (Accepted)

[Marc Deslauriers]

corosync (3.1.9-2ubuntu3) resolute; urgency=medium

  * SECURITY UPDATE: DoS via wrong return value
    - debian/patches/CVE-2026-35091.patch: return error if sanity check
      fails in exec/totemsrp.c.
    - CVE-2026-35091
  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2026-35092.patch: fix integer overflow in
      memb_join_sanity in exec/totemsrp.c.
    - CVE-2026-35092

Date: Fri, 10 Apr 2026 08:06:30 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/corosync/3.1.9-2ubuntu3
-------------- next part --------------
Format: 1.8
Date: Fri, 10 Apr 2026 08:06:30 -0400
Source: corosync
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 3.1.9-2ubuntu3
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 corosync (3.1.9-2ubuntu3) resolute; urgency=medium
 .
   * SECURITY UPDATE: DoS via wrong return value
     - debian/patches/CVE-2026-35091.patch: return error if sanity check
       fails in exec/totemsrp.c.
     - CVE-2026-35091
   * SECURITY UPDATE: DoS via integer overflow
     - debian/patches/CVE-2026-35092.patch: fix integer overflow in
       memb_join_sanity in exec/totemsrp.c.
     - CVE-2026-35092
Checksums-Sha1:
 c09e26279123807e0e3f736473c19fdf17da1c47 3353 corosync_3.1.9-2ubuntu3.dsc
 603613a5fc1a294bc0d90fa02032f4bb6a8b11b8 32172 corosync_3.1.9-2ubuntu3.debian.tar.xz
 5c11c0ae308368f18c80db173782cb8184f0f5c7 8252 corosync_3.1.9-2ubuntu3_source.buildinfo
Checksums-Sha256:
 ef9bcf804ed984a23d076060fcfc84a4b82e3448a4994d8b0253402bc06462e0 3353 corosync_3.1.9-2ubuntu3.dsc
 b0c8c16aaf71131f647d253380137f9ca84cea2c8f83d8207b4551aad90e4ef8 32172 corosync_3.1.9-2ubuntu3.debian.tar.xz
 c51619b4f62a0b2fe32b2d665d4089c7ffb6c634e818b90a6a2edd4c7303ced0 8252 corosync_3.1.9-2ubuntu3_source.buildinfo
Files:
 f7db20b63cf851467be4db38d8cab79a 3353 admin optional corosync_3.1.9-2ubuntu3.dsc
 fca7eab447f6f4f5b999847c66e73c07 32172 admin optional corosync_3.1.9-2ubuntu3.debian.tar.xz
 e29d8e275547a5d43523f728bccf4eb7 8252 admin optional corosync_3.1.9-2ubuntu3_source.buildinfo
Original-Maintainer: Debian HA Maintainers <debian-ha-maintainers at lists.alioth.debian.org>