GCVE-110-MAGEIA-2026-313

Advisory Published

Vulnetix · Advisory published August 3, 2026

The updated packages fix security vulnerabilities: Denial of service and information disclosure via crafted udp packet. (CVE-2026-35091) Denial of service via integer overflow in join message validation. (CVE-2026-35092) Additionally, libqb solves a missing runtime dependency on qb-blackbox.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	libqb	0 (affected), 2.0.8-1.1.mga9 (unaffected)	—
Mageia	libqb	0 (affected), 2.0.9-1.1.mga10 (unaffected)	—
Mageia	corosync	0 (affected), 3.1.10-2.1.mga10 (unaffected)	—
Mageia	corosync	0 (affected), 3.1.7-1.3.mga9 (unaffected)	—

References

Updated corosync and libqb packages fix security vulnerabilities

advisory

Updated corosync and libqb packages fix security vulnerabilities

issue

Updated corosync and libqb packages fix security vulnerabilities

url

Updated corosync and libqb packages fix security vulnerabilities

url

Browse GCVE Records

67,407 records in the GCVE database · Updated August 11, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON