[From nobody Sun May 3 20:37:07 2026 Received: (at 1133837-close) by bugs.debian.org; 3 May 2026 19:34:45 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 14; hammy, 150; neutral, 242; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:37566) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wJcaT-005JfC-2D for 1133837-close@bugs.debian.org; Sun, 03 May 2026 19:34:45 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wJcaS-002CaJ-1C for 1133837-close@bugs.debian.org; Sun, 03 May 2026 19:34:44 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=CRDOd2ssFBV9VqU8ykpi/Ctk/YFwfpphl2vrx2A6Q1Y=; b=ABPd2/7VlSUca7x7N20h+8UV9u xF41zHFlAUn0rAwtLCs+q4V0HmUagZQCFgjJ2AZAYn8mN8W0aUxNtPyVpCVgE46LPuoYkBSc/Db06 9N2XYt9R6PRvFwDYJg9qsM+8ypGHN0MBtaZcqJzL1FVVLDCzsXHy7jKFeK5cfC9svFH+38FY37eYP Secx0bSj23/8Gnr/vVLTvFgoLA1QpZcq6yPvuhQlAjJHkNyptFTftdpcM83LCPYqY/Iodwk1yE5eQ BEN9XYqvmKBhN4Knhr37mLD3XoHOSWLiu9ADczyESZyDedMD5ZfePCPc44a+FyXN9TmLKqu5Pjk/q aM8OOp2w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wJcaR-0000000A0D6-1l4n; Sun, 03 May 2026 19:34:43 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Ferenc_W=C3=A1gner?= <wferi@debian.org> To: 1133837-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: corosync Debian: DAK Debian-Changes: corosync_3.1.10-2_source.changes Debian-Source: corosync Debian-Version: 3.1.10-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133837: fixed in corosync 3.1.10-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7542374716384880619==" Message-Id: <E1wJcaR-0000000A0D6-1l4n@fasolo.debian.org> Date: Sun, 03 May 2026 19:34:43 +0000 --===============7542374716384880619== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: corosync Source-Version: 3.1.10-2 Done: Ferenc W=C3=A1gner <wferi@debian.org> We believe that the bug you reported is fixed in the latest version of corosync, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133837@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Ferenc W=C3=A1gner <wferi@debian.org> (supplier of updated corosync package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 03 May 2026 19:11:34 +0200 Source: corosync Architecture: source Version: 3.1.10-2 Distribution: unstable Urgency: medium Maintainer: Debian HA Maintainers <debian-ha-maintainers@lists.alioth.debian.= org> Changed-By: Ferenc W=C3=A1gner <wferi@debian.org> Closes: 1133837 1133838 Changes: corosync (3.1.10-2) unstable; urgency=3Dmedium . * [9e54989] New patch: totemsrp: Return error if sanity check fails. Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838) * [662fcc1] New patch: totemsrp: Fix integer overflow in memb_join_sanity. Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837) * [897f05b] Update Standards-Version to 4.7.4 (no changes required) * [267bcf5] New patch: man: drop extra .TP from corosync-keygen.8 Checksums-Sha1: 1506d90ad4b9a3c8ce9a153f52bc4cfeeee1960f 3503 corosync_3.1.10-2.dsc 07d8c25fcb9e4fe61c59ae7087d3f4fdc61a74a6 29720 corosync_3.1.10-2.debian.tar.= xz 9ff52c4f41d8318b8dceea4cdcab5535a2ce806a 17413 corosync_3.1.10-2_amd64.build= info Checksums-Sha256: dbea38e78ae11d8cdd1368044dceb34321f37f1c21f02da5505a975d9aaf440c 3503 corosy= nc_3.1.10-2.dsc 56801f27163360820534a5526cf8a563bdb1b2ef807f6cf5321a35d744cb056f 29720 coros= ync_3.1.10-2.debian.tar.xz 9bc4cfe158b4f8cbd71f0b053d818e577aa0baca2b8cb1d14aeecfa161550cfe 17413 coros= ync_3.1.10-2_amd64.buildinfo Files: 17bdd634426a07dcf553ad9f7c311c8f 3503 admin optional corosync_3.1.10-2.dsc 234cab523a48e4a264bd846f0ff3b318 29720 admin optional corosync_3.1.10-2.debi= an.tar.xz c2d3be67fe1e55ae627527b7b6e75f89 17413 admin optional corosync_3.1.10-2_amd6= 4.buildinfo -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEwddEx0RNIUL7eugtOsj3Fkd+2yMFAmn3gsAACgkQOsj3Fkd+ 2yNF0Q/48esLD4OL1XZZXnD8N4myZcPn/6wHAN8GlK51Lb8P4bh6ezgzO+yTHtaB +MSP9x7UfTnpacOg1yJ6DewUEVFASSjYel1MvbzMJhkkOeOKuLSiSSvAu3aykioq WnLeS+eoZxtW/duxrgN8FjH0Fiqgr+SHuTzZTQLHu4LShjnUxuB40h6h0VwPbPt/ Ho2ajzl8BD4cGBs5dJxjO2N2Dogv682dVmQ3rxtHkDJUV+N/WEqdTKa5AL7AcLpS UmFfsA+N/OL6Y7SARHpKFFf/vaCqIUh8aGDwZb7nGfQj9/PjDqYki/c114ATUGmn Hx7QaMlgF5s6wRVQiOZpmAF7bFIO/ZsXAx5W2zHyQAbXpNdOiYLoBfo5HwhZXsHQ h+q1xI4/YgETsgmmVvR3ZGuhyy+hBLcpuUw94nC15B2DCG+6ytMgm/dIrxYM6YQ1 UJawgo1tkwrVVIBN4JT4dT4vw/7eQ/bPcaosVNSjysDtXn7upEvmyiYZDa42CqOU +VFnvr5HiAsjxhIXNLsPS1MPHdUeF9ZW8ZSqe9wsaK9JAI1mS4MYh4BZv5ZRmNJR jTigyC/E+Lka/XAHgf4l04NDeX/U0wGZb/fARe321hf2YWZSkT5hsrrxuDgyWwws ayft9jLJ+YmyDugzy8b9rcXEurhhi5ek9piM/yZcK9/794rxXQ=3D=3D =3DUmaw -----END PGP SIGNATURE----- --===============7542374716384880619== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafejUwAKCRCb9qggYcy5 IWNGAP9vBFaeCgzfIFezCiEPPhM9YAB5aIEu7OCxMU4wRAnmsAD+OloVvWjs8emT waNyvAf3/nfPQnnwPEHatXjqRFgYTAc= =rLUJ -----END PGP SIGNATURE----- --===============7542374716384880619==-- ]