Most recent entries from all

ALSA-2022:6439 — Moderate: booth security update

Affected: AlmaLinux:8: booth, AlmaLinux:8: booth-arbitrator, AlmaLinux:8: booth-core, AlmaLinux:8: booth-site, AlmaLinux:8: booth-test

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.

Security Fix(es):

* booth: authfile directive in booth config file is completely ignored. (CVE-2022-2553)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-12410

fkie_cve-2022-2553

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

GHSA-9ppf-2r5r-2chh

gsd-2022-2553

msrc_CVE-2022-2553 — The authfile directive in the booth config file is ignored preventing use of authentication in communications from node…

msrc_CVE-2022-2553

RHSA-2022:6250 — Red Hat Security Advisory: booth security update

booth: authfile directive in booth config file is completely ignored.

RHSA-2022:6439 — Red Hat Security Advisory: booth security update

booth: authfile directive in booth config file is completely ignored.

SUSE-SU-2022:2605-1 — Security update for booth

Security update for booth

UBUNTU-CVE-2022-2553

Affected: Ubuntu:20.04:LTS: booth, Ubuntu:22.04:LTS: booth, Ubuntu:25.10: booth