ALSA-2025:7201

Source
https://errata.almalinux.org/9/ALSA-2025-7201.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2025:7201.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2025:7201
Related
Published
2025-05-13T00:00:00Z
Modified
2025-07-02T13:16:42Z
Summary
Moderate: corosync security update
Details

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

  • corosync: Stack buffer overflow from 'orftokenendian_convert' (CVE-2025-30472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

References

Affected packages

AlmaLinux:9 / corosync-vqsim

Package

Name
corosync-vqsim
Purl
pkg:rpm/almalinux/corosync-vqsim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.1.9-2.el9_6

AlmaLinux:9 / corosynclib

Package

Name
corosynclib
Purl
pkg:rpm/almalinux/corosynclib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.1.9-2.el9_6