Medium ELSA-2025-7478 1 CVE

Moderate: corosync security update (Oracle Linux 10)

Published Jul 2, 2025 · Updated Jul 2, 2025

Ecosystem: Oracle Linux

Summary

[3.1.9-1.1]
- Resolves: RHEL-84612

- totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 10	corosync	0:3.1.9-1.el10_0.1
Oracle Linux · 10	corosync-vqsim	0:3.1.9-1.el10_0.1
Oracle Linux · 10	corosynclib	0:3.1.9-1.el10_0.1

Vulnerabilities 1

Critical 9.0

CVE-2025-30472

Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer ov…

Corosync Corosync corosync corosync Debian Ubuntu Azure Linux

Mar 22, 2025