Public bug reported:

A new release of corosync is available for merging from Debian.

Ubuntu: 3.1.10-2ubuntu2
Debian Unstable: 3.1.10-3

### New Debian Changes ###

corosync (3.1.10-3) unstable; urgency=medium

  * Team Upload
  * [0963378] drop "Rules-Requires-Root: no": it is the default now
  * [cd54b86] rewrite d/watch in v5 format

  [ Luca Boccassi ]
  * [5cc793a] Drop unused adduser dependency.
    The adduser call was removed in 733e0c04 (2015),
    but the dependency was never cleaned up.

 -- Alexandre Detiste <[email protected]>  Tue, 21 Jul 2026 18:34:42
+0200


### Old Ubuntu Delta ###

corosync (3.1.10-2ubuntu2) stonking; urgency=medium

  * No-change rebuild for net-snmp 5.9.5

 -- Hector Cao <[email protected]>  Mon, 08 Jun 2026 09:06:08
-0300

corosync (3.1.10-2ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/t/quorumtool: search for localhost instead of node1
    - d/p/Make-the-example-config-valid.patch: comment out the node name
      in config file. With this, we will keep the same behavior as we
      have in Bionic which is using the output of "uname -n" as the node
      name (LP #1874719).
    - d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch:
      Retry knet_handle_new without privileged flag (LP #1918735).
   * Dropped changes:
    - SECURITY UPDATE: DoS via wrong return value
      + debian/patches/CVE-2026-35091.patch: return error if sanity check
      fails in exec/totemsrp.c.
      + CVE-2026-35091
    - SECURITY UPDATE: DoS via integer overflow
      + debian/patches/CVE-2026-35092.patch: fix integer overflow in
      memb_join_sanity in exec/totemsrp.c.
      + CVE-2026-35092

 -- Simon Quigley <[email protected]>  Mon, 04 May 2026 19:36:12 -0500

** Affects: corosync (Ubuntu)
     Importance: Wishlist
         Status: New


** Tags: needs-merge upgrade-software-version

** Changed in: corosync (Ubuntu)
   Importance: Undecided => Wishlist

** Changed in: corosync (Ubuntu)
    Milestone: None => ubuntu-26.05

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2163539

Title:
  Merge corosync 3.1.10-3 from Debian for stonking cycle

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/corosync/+bug/2163539/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to