Most recent entries from all

ALSA-2024:3659 — Important: booth security update

Affected: AlmaLinux:8: booth, AlmaLinux:8: booth-arbitrator, AlmaLinux:8: booth-core, AlmaLinux:8: booth-site, AlmaLinux:8: booth-test

The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.

Security Fix(es):

* booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server (CVE-2024-3049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-05602

EUVD-2026-276411

fkie_cve-2024-3049

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

GHSA-gqh6-f673-ccgc

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

gsd-2024-3049

OESA-2024-2048 — booth security update

Affected: openEuler:22.03-LTS-SP3: booth

Booth manages tickets which authorize cluster sites located in geographically dispersed locations to run resources. It facilitates support of geographically distributed clustering in Pacemaker. Security Fix(es): A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.(CVE-2024-3049)

RHSA-2024:3657 — Red Hat Security Advisory: booth security update

booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server

SUSE-SU-2024:2041-1 — Security update for booth

Security update for booth

UBUNTU-CVE-2024-3049

Affected: Ubuntu:Pro:18.04:LTS: booth, Ubuntu:Pro:20.04:LTS: booth, Ubuntu:Pro:22.04:LTS: booth, Ubuntu:Pro:24.04:LTS: booth, Ubuntu:25.10: booth

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

WID-SEC-W-2024-1302 — Red Hat Enterprise Linux (Booth): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.