Accepted corosync 3.1.7-1+deb12u2 (source) into oldstable-proposed-updates

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 May 2026 23:24:43 +0200
Source: corosync
Architecture: source
Version: 3.1.7-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Debian HA Maintainers <[email protected]>
Changed-By: Ferenc Wágner <[email protected]>
Closes: 1133837 1133838
Changes:
 corosync (3.1.7-1+deb12u2) bookworm-security; urgency=high
 .
   * [809a6e8] New patch: totemsrp: Return error if sanity check fails.
     Fixes CVE-2026-35091. Thanks to Jan Friesse (Closes: #1133838)
   * [70d459c] New patch: totemsrp: Fix integer overflow in memb_join_sanity.
     Fixes CVE-2026-35092. Thanks to Jan Friesse (Closes: #1133837)
Checksums-Sha1:
 3c609a8367cdd24b5160826481ca2ef3075dfece 3530 corosync_3.1.7-1+deb12u2.dsc
 1630181bcac161c6136c79979d1fa4a11356b5a3 1126053 corosync_3.1.7.orig.tar.gz
 701c40a51c13d404b89bca53f637e34880761631 801 corosync_3.1.7.orig.tar.gz.asc
 c76048a6da55e69c976396a8331db0f9d62d6106 28620 corosync_3.1.7-1+deb12u2.debian.tar.xz
 72d316d7deb3ec6ca9625ce2c6aad56d2e4d784d 18240 corosync_3.1.7-1+deb12u2_amd64.buildinfo
Checksums-Sha256:
 3bd019b08d3f96ecbf70991e0e386448176ae0b7b7b0599484a77c26a3a7489a 3530 corosync_3.1.7-1+deb12u2.dsc
 e6556b3a385965f21330b9383dcd1790f28a4f79e093982b40ea2ec23e0a29fa 1126053 corosync_3.1.7.orig.tar.gz
 8b2b4bbcb8af17ed01c99a5f922d0630b0044850c99937a74d2afe81f8a33176 801 corosync_3.1.7.orig.tar.gz.asc
 b863c9ca4b5e356875003382dc9a5623bb3bd02625cbead29bf7616acde984e6 28620 corosync_3.1.7-1+deb12u2.debian.tar.xz
 e938d2730a3da87aaa3d283b18ccd24eb4241bc360170d29f090cb6291ae09f0 18240 corosync_3.1.7-1+deb12u2_amd64.buildinfo
Files:
 c5b1fc9485bac8eed70dcf83f3341d2a 3530 admin optional corosync_3.1.7-1+deb12u2.dsc
 83652b5ed1feecc80eac2ac9c3a2771e 1126053 admin optional corosync_3.1.7.orig.tar.gz
 d521f74cb8b97c6a8face1f4d5b7373d 801 admin optional corosync_3.1.7.orig.tar.gz.asc
 d4beaa2d5cccb95c15e5d0ab1bfc126a 28620 admin optional corosync_3.1.7-1+deb12u2.debian.tar.xz
 5795462d31d3d107931f6d9b3400b473 18240 admin optional corosync_3.1.7-1+deb12u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=HE+v
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCagCzZQAKCRCb9qggYcy5
Ier6AP4sSRxN238LQT9qxaB40Y9eqL36CQ25fasvuGHnzn51HAD/bnrAoLcMYO2p
mWktLL/nDGoX4HMvRY2b8B7kFzwP2wQ=
=O/DQ
-----END PGP SIGNATURE-----