Public bug reported:
A new release of corosync is available for merging from Debian.
Ubuntu: 3.1.10-2ubuntu2
Debian Unstable: 3.1.10-3
### New Debian Changes ###
corosync (3.1.10-3) unstable; urgency=medium
* Team Upload
* [0963378] drop "Rules-Requires-Root: no": it is the default now
* [cd54b86] rewrite d/watch in v5 format
[ Luca Boccassi ]
* [5cc793a] Drop unused adduser dependency.
The adduser call was removed in 733e0c04 (2015),
but the dependency was never cleaned up.
-- Alexandre Detiste <[email protected]> Tue, 21 Jul 2026 18:34:42
+0200
### Old Ubuntu Delta ###
corosync (3.1.10-2ubuntu2) stonking; urgency=medium
* No-change rebuild for net-snmp 5.9.5
-- Hector Cao <[email protected]> Mon, 08 Jun 2026 09:06:08
-0300
corosync (3.1.10-2ubuntu1) stonking; urgency=medium
* Merge with Debian unstable. Remaining changes:
- d/t/quorumtool: search for localhost instead of node1
- d/p/Make-the-example-config-valid.patch: comment out the node name
in config file. With this, we will keep the same behavior as we
have in Bionic which is using the output of "uname -n" as the node
name (LP #1874719).
- d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch:
Retry knet_handle_new without privileged flag (LP #1918735).
* Dropped changes:
- SECURITY UPDATE: DoS via wrong return value
+ debian/patches/CVE-2026-35091.patch: return error if sanity check
fails in exec/totemsrp.c.
+ CVE-2026-35091
- SECURITY UPDATE: DoS via integer overflow
+ debian/patches/CVE-2026-35092.patch: fix integer overflow in
memb_join_sanity in exec/totemsrp.c.
+ CVE-2026-35092
-- Simon Quigley <[email protected]> Mon, 04 May 2026 19:36:12 -0500
** Affects: corosync (Ubuntu)
Importance: Wishlist
Status: New
** Tags: needs-merge upgrade-software-version
** Changed in: corosync (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: corosync (Ubuntu)
Milestone: None => ubuntu-26.05
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2163539
Title:
Merge corosync 3.1.10-3 from Debian for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/corosync/+bug/2163539/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs