Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Kernel Important Security Fix for net/can 2026-f1fc7772c3

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026-d36ca2dd19

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 perl-Crypt-OpenSSL-X509 Important Fix CVE-2026-58101

Calendar White Jul 21, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 rust-syslog Critical Path Traversal DoS Vuln 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Rust RPKI Critical Path Traversal Issues Fix 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Routinator Important Security Fixes CVE-2026-49232 to 49235

Calendar White Jul 21, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Kernel Important Net CAN Issue Fix Advisory 2026-2dd8b600bb

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 btrbk Critical Update Snapshot Tool Fix CVE-2026-62943

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 26 articles for you...
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian corosync DoS Advisory DLA-4608-1 CVE-2026-35091 CVE-2026-35092

Two vulnerabilities have been found in corosync, a cluster engine daemon and utilities, that allow a remote, unauthenticated attacker to cause a denial of service. CVE-2026-35091 A remote unauthenticated attacker can exploit a wrong return value. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4608-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Emmanuel Arias May 30, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : corosync Version : 3.1.2-2+deb11u2 CVE ID : CVE-2026-35091 CVE-2026-35092 Debian Bug : 1133837 1133838 Two vulnerabilities have been found in corosync, a cluster engine daemon and utilities, that allow a remote, unauthenticated attacker to cause a denial of service. CVE-2026-35091 A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. CVE-2026-35092 An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. For Debian 11 bullseye, these problems have been fixed in version 3.1.2-2+deb11u2. We recommend that you upgrade your corosync packages. For the detailed security status of corosync please refer to its security tracker page at: https://security-tracker.debian.org/tracker/corosync Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Criticalupdates for corosync in Debian due to remote attackers causing Denial of Service via UDP packets. Upgrade recommended.. corosync security update, Debian LTS advisory, UDP denial of service. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 30, 2026 •Critical Debian LTS
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderateOracle

Oracle Linux 8 ELSA-2026-13657 Corosync Moderate Threat Advisory

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-13657 http://linux.oracle.com/errata/ELSA-2026-13657.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: corosync-vqsim-3.1.8-1.el8_10.1.x86_64.rpm corosynclib-3.1.8-1.el8_10.1.i686.rpm corosynclib-3.1.8-1.el8_10.1.x86_64.rpm aarch64: corosync-vqsim-3.1.8-1.el8_10.1.aarch64.rpm corosynclib-3.1.8-1.el8_10.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/corosync-3.1.8-1.el8_10.1.src.rpm Related CVEs: CVE-2026-35091 CVE-2026-35092 Description of changes: [3.1.8-1.1] - Resolves: RHEL-163805 - Resolves: RHEL-163826 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated Oracle Linux 8 rpms for corosync with moderate severity are available to prevent security issues.. Oracle Linux Corosync Update Security Moderate. . LinuxSecurity.com Team

Calendar%202 May 14, 2026 Oracle
Banner 1 1028x280 1708121660 1771599717
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderateinteger overflow

Oracle Linux 10 Corosync Moderate Integer Overflow Issues ELSA-2026-13644

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-13644 http://linux.oracle.com/errata/ELSA-2026-13644.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: corosync-vqsim-3.1.9-2.el10_1.1.x86_64.rpm corosynclib-3.1.9-2.el10_1.1.x86_64.rpm aarch64: corosync-vqsim-3.1.9-2.el10_1.1.aarch64.rpm corosynclib-3.1.9-2.el10_1.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/corosync-3.1.9-2.el10_1.1.src.rpm Related CVEs: CVE-2026-35091 CVE-2026-35092 Description of changes: [3.1.9-2.1] - Resolves: RHEL-163801 - Resolves: RHEL-163822 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 10 receives updates for corosync addressing moderate issues, including integer overflow and sanity checks.. Oracle Linux, corosync, security patch, intermediate threats, RPM updates. . LinuxSecurity.com Team

Calendar%202 May 14, 2026 Oracle
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicecritical

Debian Bookworm Corosync Critical DoS Memory Disclosure DSA-6261-1

Two security vulnerabilities were discovered in the Corosync cluster engine, which could result in denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 3.1.7-1+deb12u2. For the stable distribution (trixie), these problems have been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6261-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff May 10, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : corosync CVE ID : CVE-2026-35091 CVE-2026-35092 Two security vulnerabilities were discovered in the Corosync cluster engine, which could result in denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 3.1.7-1+deb12u2. For the stable distribution (trixie), these problems have been fixed in version 3.1.9-2+deb13u1. We recommend that you upgrade your corosync packages. For the detailed security status of corosync please refer to its security tracker page at: https://security-tracker.debian.org/tracker/corosync Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Corosync faces critical vulnerabilities leading to denial of service and memory disclosure in Debian. Immediate updates recommended.. Corosync security, Debian advisory, denial of service vulnerabilities, memory disclosure risks. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 10, 2026 •Critical Debian
Banner 1 1028x280 1708121660 1771599717
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderateinteger overflow

Oracle Linux 9 Corosync Moderate Security Advisory ELSA-2026-13673

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-13673 http://linux.oracle.com/errata/ELSA-2026-13673.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: corosync-vqsim-3.1.9-2.el9_7.1.x86_64.rpm corosynclib-3.1.9-2.el9_7.1.i686.rpm corosynclib-3.1.9-2.el9_7.1.x86_64.rpm aarch64: corosync-vqsim-3.1.9-2.el9_7.1.aarch64.rpm corosynclib-3.1.9-2.el9_7.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/corosync-3.1.9-2.el9_7.1.src.rpm Related CVEs: CVE-2026-35091 CVE-2026-35092 Description of changes: [3.1.9-2.1] - Resolves: RHEL-163815 - Resolves: RHEL-163836 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated Corosync rpms for Oracle Linux 9 address moderate security issues and include fixes for known vulnerabilities.. Oracle Linux, Corosync, Security Advisory, RPM Updates, Integer Overflow. . LinuxSecurity.com Team

Calendar%202 May 08, 2026 Oracle
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorymoderatedenial of service

Rocky Linux 10 Corosync Patch Release RLSA-2026-13647 Has Been Published

Moderate: corosync security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:13644", "synopsis": "Moderate: corosync security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for corosync.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.\n\nSecurity Fix(es):\n\n* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)\n\n* corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2453814", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2453814", "description": ""}, {"ticket": "2453813", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2453813", "description": ""}], "cves": [{"name": "CVE-2026-35091", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35091", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "cvss3BaseScore": "8.2", "cwe": "CWE-253"}, {"name": "CVE-2026-35092", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35092", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-190"}], "references": [], "publishedAt": "2026-05-06T12:05:16.751656Z", "rpms": {"Rocky Linux 10": {"nvras": ["corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64.rpm", "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x.rpm","corosync-vqsim-0:3.1.9-2.el10_1.1.s390x.rpm", "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x.rpm", "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le.rpm", "corosync-0:3.1.9-2.el10_1.1.src.rpm", "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le.rpm", "corosynclib-0:3.1.9-2.el10_1.1.s390x.rpm", "corosynclib-0:3.1.9-2.el10_1.1.aarch64.rpm", "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64.rpm", "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64.rpm", "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64.rpm", "corosynclib-0:3.1.9-2.el10_1.1.ppc64le.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x.rpm", "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64.rpm", "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64.rpm", "corosynclib-0:3.1.9-2.el10_1.1.x86_64.rpm", "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64.rpm", "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x.rpm", "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64.rpm", "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64.rpm", "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64.rpm", "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Moderate security update for corosync affects Rocky Linux 10, fixing potential DoS and information disclosure issues.. Corosync Security Update, Rocky Linux Advisory, DoS Information Disclosure. . LinuxSecurity.com Team

Calendar%202 May 06, 2026 Rocky Linux
Banner 1 1028x280 1708121660 1771599717
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorymoderatedenial of service

Rocky Linux 9 RLSA-2023-14676 Corosync Medium Service Disruption Alert

Moderate: corosync security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:13673", "synopsis": "Moderate: corosync security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for corosync.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.\n\nSecurity Fix(es):\n\n* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)\n\n* corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2453813", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2453813", "description": ""}, {"ticket": "2453814", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2453814", "description": ""}], "cves": [{"name": "CVE-2026-35091", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35091", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "cvss3BaseScore": "8.2", "cwe": "CWE-253"}, {"name": "CVE-2026-35092", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35092", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-190"}], "references": [], "publishedAt": "2026-05-06T06:02:14.811706Z", "rpms": {"Rocky Linux 9": {"nvras": ["corosync-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosync-0:3.1.9-2.el9_7.1.s390x.rpm", "corosync-0:3.1.9-2.el9_7.1.src.rpm","corosync-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosync-debuginfo-0:3.1.9-2.el9_7.1.aarch64.rpm", "corosync-debuginfo-0:3.1.9-2.el9_7.1.i686.rpm", "corosync-debuginfo-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosync-debuginfo-0:3.1.9-2.el9_7.1.s390x.rpm", "corosync-debuginfo-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosync-debugsource-0:3.1.9-2.el9_7.1.aarch64.rpm", "corosync-debugsource-0:3.1.9-2.el9_7.1.i686.rpm", "corosync-debugsource-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosync-debugsource-0:3.1.9-2.el9_7.1.s390x.rpm", "corosync-debugsource-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosynclib-0:3.1.9-2.el9_7.1.aarch64.rpm", "corosynclib-0:3.1.9-2.el9_7.1.i686.rpm", "corosynclib-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosynclib-0:3.1.9-2.el9_7.1.s390x.rpm", "corosynclib-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosynclib-debuginfo-0:3.1.9-2.el9_7.1.aarch64.rpm", "corosynclib-debuginfo-0:3.1.9-2.el9_7.1.i686.rpm", "corosynclib-debuginfo-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosynclib-debuginfo-0:3.1.9-2.el9_7.1.s390x.rpm", "corosynclib-debuginfo-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosynclib-devel-0:3.1.9-2.el9_7.1.i686.rpm", "corosynclib-devel-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosynclib-devel-0:3.1.9-2.el9_7.1.s390x.rpm", "corosynclib-devel-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosync-vqsim-0:3.1.9-2.el9_7.1.aarch64.rpm", "corosync-vqsim-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosync-vqsim-0:3.1.9-2.el9_7.1.s390x.rpm", "corosync-vqsim-0:3.1.9-2.el9_7.1.x86_64.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el9_7.1.aarch64.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el9_7.1.ppc64le.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el9_7.1.s390x.rpm", "corosync-vqsim-debuginfo-0:3.1.9-2.el9_7.1.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A moderate-security advisory for corosync on Rocky Linux 9, highlighting a critical update needed to address potential threats.. Rocky Linux 9, corosync security update, Denial of Service, information disclosure. . LinuxSecurity.com Team

Calendar%202 May 06, 2026 Rocky Linux
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorymoderateDoS

Rocky Linux 8 RLSA-2026-23658 Moderate Service Interruption Risk Advisory

Moderate: corosync security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:13657", "synopsis": "Moderate: corosync security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for corosync.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.\n\nSecurity Fix(es):\n\n* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)\n\n* corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2453813", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2453813", "description": ""}, {"ticket": "2453814", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2453814", "description": ""}], "cves": [{"name": "CVE-2026-35091", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35091", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "cvss3BaseScore": "8.2", "cwe": "CWE-253"}, {"name": "CVE-2026-35092", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35092", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-190"}], "references": [], "publishedAt": "2026-05-06T06:00:55.617468Z", "rpms": {"Rocky Linux 8": {"nvras": ["corosync-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosync-0:3.1.8-1.el8_10.1.src.rpm", "corosync-0:3.1.8-1.el8_10.1.x86_64.rpm","corosync-debuginfo-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosync-debuginfo-0:3.1.8-1.el8_10.1.i686.rpm", "corosync-debuginfo-0:3.1.8-1.el8_10.1.x86_64.rpm", "corosync-debugsource-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosync-debugsource-0:3.1.8-1.el8_10.1.i686.rpm", "corosync-debugsource-0:3.1.8-1.el8_10.1.x86_64.rpm", "corosynclib-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosynclib-0:3.1.8-1.el8_10.1.i686.rpm", "corosynclib-0:3.1.8-1.el8_10.1.x86_64.rpm", "corosynclib-debuginfo-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosynclib-debuginfo-0:3.1.8-1.el8_10.1.i686.rpm", "corosynclib-debuginfo-0:3.1.8-1.el8_10.1.x86_64.rpm", "corosynclib-devel-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosynclib-devel-0:3.1.8-1.el8_10.1.i686.rpm", "corosynclib-devel-0:3.1.8-1.el8_10.1.x86_64.rpm", "corosync-vqsim-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosync-vqsim-0:3.1.8-1.el8_10.1.x86_64.rpm", "corosync-vqsim-debuginfo-0:3.1.8-1.el8_10.1.aarch64.rpm", "corosync-vqsim-debuginfo-0:3.1.8-1.el8_10.1.x86_64.rpm", "spausedd-0:3.1.8-1.el8_10.1.aarch64.rpm", "spausedd-0:3.1.8-1.el8_10.1.x86_64.rpm", "spausedd-debuginfo-0:3.1.8-1.el8_10.1.aarch64.rpm", "spausedd-debuginfo-0:3.1.8-1.el8_10.1.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Corosync security update for Rocky Linux 8 addresses denial of service and information disclosure vulnerabilities effectively.. corosync security update, Rocky Linux patch, DoS threat fix. . LinuxSecurity.com Team

Calendar%202 May 06, 2026 Rocky Linux
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics