Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: Cortina: The frag counter is carried over between invocations. The gmacrx NAPI poll function assembles packets from a ring buffer in the SKB. If the ring buffer is completely emptied during a poll cycle, we exit...

Rocky Linux 10.2 [CIQ] Security Update: corosync-debuginfo / corosync-debugsource / corosync-vqsim / etc (crlsa-2026_67872)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667872 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the precedin...

Rocky Linux 8 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc (crlsa-2026_69277)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669277 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the preceding...

AlmaLinux 10 : corosync (ALSA-2026:67872)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67872 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the preceding...

SUSE-SU-2026:4387-1 Security update for corosync

This update for corosync fixes the following issue: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738...

Security update for corosync (important)

openSUSE security update: security update for corosync ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21887-1 Rating: important References: bsc1278738 bsc1278739 Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5...

CVE-2026-67235

A flaw was found in RabbitMQ. An authenticated AMQP 0-9-1 client with publish permissions can exploit a vulnerability in the body assembly process. By declaring an extremely large BodySize and streaming message fragments, the client can bypass size validation, leading to unbounded memory...

RLSA-2026:69277 Important: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 For more details about the security issues, includin...

corosync security update

An update is available for corosync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The corosync packages provide the Corosync Cluster Engine and C APIs for Roc...

MiracleLinux 8 : corosync-3.1.8-1.el8_10.2 (AXSA:2026-1890:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1890:06 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

ALSA-2026:69277 Important: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fixes: corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 For more details about the security issues, including...

RHEL 8 : corosync (RHSA-2026:69279)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69279 advisory. The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software. Security Fixes: corosync:...

RHEL 8 : corosync (RHSA-2026:69280)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69280 advisory. The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software. Security Fixes: corosync:...

SUSE-SU-2026:23850-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

OPENSUSE-SU-2026:21887-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

corosync security update

An update is available for corosync. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The corosync packages provide the Corosync Cluster Engine and C APIs for...

Flock Once Touted Its Cameras as ‘Made in the USA.’ Now It’s Not So Clear

Flock reveals little about where its license plate readers are assembled, but the answer could have geopolitical and cybersecurity implications...

SUSE SLES15: corosync / corosync-qdevice / corosync-qnetd / corosync-testagents / etc (SUSE-SU-2026:4202-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4202-1 advisory. - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666:...