Red Hat Product Errata RHSA-2026:69279 - Security Advisory
Issued:
2026-09-21
Updated:
2026-09-21

RHSA-2026:69279 - Security Advisory

Synopsis

Important: corosync security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for corosync is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software.

Security Fix(es):

  • corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x
  • Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
  • Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x
  • Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x

Fixes

  • BZ - 2524910 - CVE-2026-81665 corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
corosync-3.1.5-2.el8_6.2.src.rpm SHA-256: b8d8c4491f3d73a6baf59c9084a846510f70087914d4173011d0e3c83bf46c2e
x86_64
corosync-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: b5f70c5e15c7d9d738f815483f703657bdc081b62a14e8d0a91a7d2f778880a4
corosync-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 2463b22c966411523b1637214aa92ff76cd54f92287217149f3712f336686249
corosync-debugsource-3.1.5-2.el8_6.2.i686.rpm SHA-256: 43b73033091f5ee1eb96c59d7464a19f313e3d9456df84a66991336d04b0a6af
corosync-debugsource-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: c173e4c306a413fe8cac76fd2ab91e9c486d74ab9d55fc8491891f7aae9984b0
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: 8254c8de785f687967e0c62c6a17e3eda59283f4367f7082f582dc34f576b5b3
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 443e9908a4ffb813b8a7d93467e354795126b86553c5fd84d9b2b767a03c533a
corosynclib-3.1.5-2.el8_6.2.i686.rpm SHA-256: 469de06e4efa7b5409ea492cbb626a8070389b38ac301c00c9e121c8dcdc22e0
corosynclib-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: e8072a82165dc830cfd99e8f6e6884e12c2a3f6d5056f87a029c8d9858e71faa
corosynclib-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: ae8dfb67ce549f7ad4102748d9d978432ce4a17891d9881672d23f1a144c7d48
corosynclib-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 906b6c9aafe57a500efa2c99cf58649a6aa7f806a8e0f88d6b2484a8eaaf81af
spausedd-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: 6dc269c6e1320ba642ef35070dc11a39f45899c2eec91fb3983e8b654679af3b
spausedd-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 47082e34c7f4c1b1abe01bc0c91a85822d9d80ec203d0751c4d41980bc04b275

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
corosync-3.1.5-2.el8_6.2.src.rpm SHA-256: b8d8c4491f3d73a6baf59c9084a846510f70087914d4173011d0e3c83bf46c2e
x86_64
corosync-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: b5f70c5e15c7d9d738f815483f703657bdc081b62a14e8d0a91a7d2f778880a4
corosync-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 2463b22c966411523b1637214aa92ff76cd54f92287217149f3712f336686249
corosync-debugsource-3.1.5-2.el8_6.2.i686.rpm SHA-256: 43b73033091f5ee1eb96c59d7464a19f313e3d9456df84a66991336d04b0a6af
corosync-debugsource-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: c173e4c306a413fe8cac76fd2ab91e9c486d74ab9d55fc8491891f7aae9984b0
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: 8254c8de785f687967e0c62c6a17e3eda59283f4367f7082f582dc34f576b5b3
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 443e9908a4ffb813b8a7d93467e354795126b86553c5fd84d9b2b767a03c533a
corosynclib-3.1.5-2.el8_6.2.i686.rpm SHA-256: 469de06e4efa7b5409ea492cbb626a8070389b38ac301c00c9e121c8dcdc22e0
corosynclib-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: e8072a82165dc830cfd99e8f6e6884e12c2a3f6d5056f87a029c8d9858e71faa
corosynclib-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: ae8dfb67ce549f7ad4102748d9d978432ce4a17891d9881672d23f1a144c7d48
corosynclib-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 906b6c9aafe57a500efa2c99cf58649a6aa7f806a8e0f88d6b2484a8eaaf81af
spausedd-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: 6dc269c6e1320ba642ef35070dc11a39f45899c2eec91fb3983e8b654679af3b
spausedd-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 47082e34c7f4c1b1abe01bc0c91a85822d9d80ec203d0751c4d41980bc04b275

Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
x86_64
corosync-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 07f0e14f6277280d6c34a8bcbb2c46dbef521b1e1e3ba2399b10cb6d89229459
corosync-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: b5f70c5e15c7d9d738f815483f703657bdc081b62a14e8d0a91a7d2f778880a4
corosync-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 2463b22c966411523b1637214aa92ff76cd54f92287217149f3712f336686249
corosync-debugsource-3.1.5-2.el8_6.2.i686.rpm SHA-256: 43b73033091f5ee1eb96c59d7464a19f313e3d9456df84a66991336d04b0a6af
corosync-debugsource-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: c173e4c306a413fe8cac76fd2ab91e9c486d74ab9d55fc8491891f7aae9984b0
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: 8254c8de785f687967e0c62c6a17e3eda59283f4367f7082f582dc34f576b5b3
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 443e9908a4ffb813b8a7d93467e354795126b86553c5fd84d9b2b767a03c533a
corosynclib-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: ae8dfb67ce549f7ad4102748d9d978432ce4a17891d9881672d23f1a144c7d48
corosynclib-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 906b6c9aafe57a500efa2c99cf58649a6aa7f806a8e0f88d6b2484a8eaaf81af
corosynclib-devel-3.1.5-2.el8_6.2.i686.rpm SHA-256: 220a43aedc5c9309c70dbb6e3b243f08918d984b2de2638b79abf82b1c16cd23
corosynclib-devel-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 37928096eda4bdf7fd92e3d4d2c7affd4184d84c8ac13f5978fe5d2faeb66a43
spausedd-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 77d4477898966ef08533a6a0f6b7f949895b0a728c817985568a209375053ff8
spausedd-debuginfo-3.1.5-2.el8_6.2.i686.rpm SHA-256: 6dc269c6e1320ba642ef35070dc11a39f45899c2eec91fb3983e8b654679af3b
spausedd-debuginfo-3.1.5-2.el8_6.2.x86_64.rpm SHA-256: 47082e34c7f4c1b1abe01bc0c91a85822d9d80ec203d0751c4d41980bc04b275

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
corosync-3.1.5-2.el8_6.2.src.rpm SHA-256: b8d8c4491f3d73a6baf59c9084a846510f70087914d4173011d0e3c83bf46c2e
aarch64
corosync-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 93dc668683b3244b7716972b388948ab008ca09609e9a19b188b6e27105e4293
corosync-debugsource-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 879416086f01c01f751f3322384044ac7faabe66453a16f93b4d8aca22b751b5
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: d0317e0aed05fef23836eedb204dcb1bef1b6dca0ccd04b9cdadae19853c1c11
corosynclib-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: a1f59d88fefa0f36aed1d68d6f7556dace610b7fa3346750f925cb3bcc8a66b4
corosynclib-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 40f4b7f46db56bb0ade79dba7b9c4f623c200e97d4582e6e89177eec5ce06236
spausedd-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: d819eb1d0857ab0edf4478b8d43e86ba641e2e12bdd441c8840d9ef9cb166540

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
corosync-3.1.5-2.el8_6.2.src.rpm SHA-256: b8d8c4491f3d73a6baf59c9084a846510f70087914d4173011d0e3c83bf46c2e
ppc64le
corosync-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 41486355ee4c0b8cca428fedcbf5813bcf2fc33f763c63cc00cf8c00eac21d42
corosync-debugsource-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 68f9358f67a31167d7b45030f60b2f0c4dd631272f9e9c39d231d9896b14989f
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 20e3ddd9a975ca98ff312bfa53b01fd80e5d31b5b407a39013ab14c2006c1002
corosynclib-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: d9c12d98c4c6ef01a6335fc05f465462b387eab908acf7eaf564638685b2aa61
corosynclib-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 9fd97b2c5ef4d52070a6ed93a9560474d6c59363957c0340feee8fd0d9fbc934
spausedd-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 1a7788f7c498d871187daa7c3e8da86215e1611892a2906c834c75c93a67c027

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
corosync-3.1.5-2.el8_6.2.src.rpm SHA-256: b8d8c4491f3d73a6baf59c9084a846510f70087914d4173011d0e3c83bf46c2e
s390x
corosync-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: bae578a7cf064a13827c872439cb9cb8f19ac912d23408f3361ab3c2d42e816b
corosync-debugsource-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 9a9351a91630b50fc98ccafce570fcfd3837e71969b948d98102a426ab9b6fc9
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: d6da7d46fd99cd6be86df151f2fe3f20803e33c44ee1a8a46307937fe7f2a59d
corosynclib-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 90cf8c8f70620659c34934d576b35f1d2f703a7370660d7020533710a4972b3a
corosynclib-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 1a1f9223010d652ed492c7fdc0581fe9f74d20e96ea286155c244d27d8e5c9bd
spausedd-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: b6045b5b32c9cc80dbcfda2d9db606cf34fee9505be393d3b67beee80b61f234

Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
aarch64
corosync-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 55ad3035436fa9afd60ca44a1bfc1f95ac62e4180a0b87c144d2e4d3166dc4c0
corosync-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 93dc668683b3244b7716972b388948ab008ca09609e9a19b188b6e27105e4293
corosync-debugsource-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 879416086f01c01f751f3322384044ac7faabe66453a16f93b4d8aca22b751b5
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: d0317e0aed05fef23836eedb204dcb1bef1b6dca0ccd04b9cdadae19853c1c11
corosynclib-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 40f4b7f46db56bb0ade79dba7b9c4f623c200e97d4582e6e89177eec5ce06236
corosynclib-devel-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: da3e07b4e0293ae868488a1fdd3ae4f32ff66a96dd55bf229d4e7ff1f15d5999
spausedd-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: 211a6d8b531eed740d02dad2f546cfa339b4daf875c6935312c6a32afde02bfb
spausedd-debuginfo-3.1.5-2.el8_6.2.aarch64.rpm SHA-256: d819eb1d0857ab0edf4478b8d43e86ba641e2e12bdd441c8840d9ef9cb166540

Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
ppc64le
corosync-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 5c2a6b0f2225e06072d2dbe045c7ea29d0db098f4cad13204506f39e9f4c1d39
corosync-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 41486355ee4c0b8cca428fedcbf5813bcf2fc33f763c63cc00cf8c00eac21d42
corosync-debugsource-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 68f9358f67a31167d7b45030f60b2f0c4dd631272f9e9c39d231d9896b14989f
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 20e3ddd9a975ca98ff312bfa53b01fd80e5d31b5b407a39013ab14c2006c1002
corosynclib-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 9fd97b2c5ef4d52070a6ed93a9560474d6c59363957c0340feee8fd0d9fbc934
corosynclib-devel-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: eabefb8ca3ccefb75407fe4f3da3b5e670de981edb7b286b69e8b9418cc4cf1d
spausedd-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: b37eaf815a079ec9fd13187f521e9f4192caebe6bcf10f4394214f089a15ac19
spausedd-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 1a7788f7c498d871187daa7c3e8da86215e1611892a2906c834c75c93a67c027

Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
s390x
corosync-3.1.5-2.el8_6.2.s390x.rpm SHA-256: cd811cbb5a458189c21625272f66cf3394854cec253c19bd362002f11199988a
corosync-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: bae578a7cf064a13827c872439cb9cb8f19ac912d23408f3361ab3c2d42e816b
corosync-debugsource-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 9a9351a91630b50fc98ccafce570fcfd3837e71969b948d98102a426ab9b6fc9
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: d6da7d46fd99cd6be86df151f2fe3f20803e33c44ee1a8a46307937fe7f2a59d
corosynclib-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 1a1f9223010d652ed492c7fdc0581fe9f74d20e96ea286155c244d27d8e5c9bd
corosynclib-devel-3.1.5-2.el8_6.2.s390x.rpm SHA-256: f1086c39695c5e913fd12446baed90151cb6adee967a9d9929bc4c853817b3c9
spausedd-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 7f6d0fba6740f72556a8ecd03663fb2c4fa02a499b68da7533bbf1f2bf04b9e2
spausedd-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: b6045b5b32c9cc80dbcfda2d9db606cf34fee9505be393d3b67beee80b61f234

Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
ppc64le
corosync-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 5c2a6b0f2225e06072d2dbe045c7ea29d0db098f4cad13204506f39e9f4c1d39
corosync-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 41486355ee4c0b8cca428fedcbf5813bcf2fc33f763c63cc00cf8c00eac21d42
corosync-debugsource-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 68f9358f67a31167d7b45030f60b2f0c4dd631272f9e9c39d231d9896b14989f
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 20e3ddd9a975ca98ff312bfa53b01fd80e5d31b5b407a39013ab14c2006c1002
corosynclib-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 9fd97b2c5ef4d52070a6ed93a9560474d6c59363957c0340feee8fd0d9fbc934
corosynclib-devel-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: eabefb8ca3ccefb75407fe4f3da3b5e670de981edb7b286b69e8b9418cc4cf1d
spausedd-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: b37eaf815a079ec9fd13187f521e9f4192caebe6bcf10f4394214f089a15ac19
spausedd-debuginfo-3.1.5-2.el8_6.2.ppc64le.rpm SHA-256: 1a7788f7c498d871187daa7c3e8da86215e1611892a2906c834c75c93a67c027

Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
s390x
corosync-3.1.5-2.el8_6.2.s390x.rpm SHA-256: cd811cbb5a458189c21625272f66cf3394854cec253c19bd362002f11199988a
corosync-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: bae578a7cf064a13827c872439cb9cb8f19ac912d23408f3361ab3c2d42e816b
corosync-debugsource-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 9a9351a91630b50fc98ccafce570fcfd3837e71969b948d98102a426ab9b6fc9
corosync-vqsim-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: d6da7d46fd99cd6be86df151f2fe3f20803e33c44ee1a8a46307937fe7f2a59d
corosynclib-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 1a1f9223010d652ed492c7fdc0581fe9f74d20e96ea286155c244d27d8e5c9bd
corosynclib-devel-3.1.5-2.el8_6.2.s390x.rpm SHA-256: f1086c39695c5e913fd12446baed90151cb6adee967a9d9929bc4c853817b3c9
spausedd-3.1.5-2.el8_6.2.s390x.rpm SHA-256: 7f6d0fba6740f72556a8ecd03663fb2c4fa02a499b68da7533bbf1f2bf04b9e2
spausedd-debuginfo-3.1.5-2.el8_6.2.s390x.rpm SHA-256: b6045b5b32c9cc80dbcfda2d9db606cf34fee9505be393d3b67beee80b61f234

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.