---

Name	DSA-6261-1
Description	corosync - security update
Source	Debian
References	CVE-2026-35091, CVE-2026-35092

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
corosync (PTS)	bookworm, bookworm (security)	3.1.7-1+deb12u2	fixed
trixie (security), trixie	3.1.9-2+deb13u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
corosync	source	bookworm	3.1.7-1+deb12u2
corosync	source	trixie	3.1.9-2+deb13u1

---

---