https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:00:22.176648+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:3659 ALSA-2024:3659 — Important: booth security update 2026-10-03T05:00:22.516286+00:00

Affected: AlmaLinux:8: booth, AlmaLinux:8: booth-arbitrator, AlmaLinux:8: booth-core, AlmaLinux:8: booth-site, AlmaLinux:8: booth-test

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.

Security Fix(es):

* booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server (CVE-2024-3049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-05602 bdu:2024-05602 2026-10-03T05:00:22.516362+00:00 bdu:2024-05602 https://cve.radiocsirt.org/vuln/euvd-2026-276411 EUVD-2026-276411 2026-10-03T05:00:22.516380+00:00 EUVD-2026-276411 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3049 fkie_cve-2024-3049 2026-10-03T05:00:22.516391+00:00

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

 https://cve.radiocsirt.org/vuln/ghsa-gqh6-f673-ccgc GHSA-gqh6-f673-ccgc 2026-10-03T05:00:22.516412+00:00

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

 https://cve.radiocsirt.org/vuln/gsd-2024-3049 gsd-2024-3049 2026-10-03T05:00:22.516426+00:00 gsd-2024-3049 https://cve.radiocsirt.org/vuln/oesa-2024-2048 OESA-2024-2048 — booth security update 2026-10-03T05:00:22.516436+00:00

Affected: openEuler:22.03-LTS-SP3: booth

Booth manages tickets which authorize cluster sites located in geographically dispersed locations to run resources. It facilitates support of geographically distributed clustering in Pacemaker. Security Fix(es): A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.(CVE-2024-3049)

 https://cve.radiocsirt.org/vuln/rhsa-2024:3657 RHSA-2024:3657 — Red Hat Security Advisory: booth security update 2026-10-03T05:00:22.516456+00:00

booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server

 https://cve.radiocsirt.org/vuln/suse-su-2024:2041-1 SUSE-SU-2024:2041-1 — Security update for booth 2026-10-03T05:00:22.516473+00:00

Security update for booth

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3049 UBUNTU-CVE-2024-3049 2026-10-03T05:00:22.516486+00:00

Affected: Ubuntu:Pro:18.04:LTS: booth, Ubuntu:Pro:20.04:LTS: booth, Ubuntu:Pro:22.04:LTS: booth, Ubuntu:Pro:24.04:LTS: booth, Ubuntu:25.10: booth

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1302 WID-SEC-W-2024-1302 — Red Hat Enterprise Linux (Booth): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T05:00:22.516510+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.