Red Hat Security Advisory

RHSA-2024:3657

booth security update

Released 2024-06-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability AUS (v.8.4) booth-1.0-199.1.ac1d34c.git.el8_4.2, booth-arbitrator-1.0-199.1.ac1d34c.git.el8_4.2, booth-core-1.0-199.1.ac1d34c.git.el8_4.2 +2
Red Hat Enterprise Linux HighAvailability E4S (v.8.4) booth-1.0-199.1.ac1d34c.git.el8_4.2, booth-arbitrator-1.0-199.1.ac1d34c.git.el8_4.2, booth-core-1.0-199.1.ac1d34c.git.el8_4.2 +2
Red Hat Enterprise Linux HighAvailability TUS (v.8.4) booth-1.0-199.1.ac1d34c.git.el8_4.2, booth-arbitrator-1.0-199.1.ac1d34c.git.el8_4.2, booth-core-1.0-199.1.ac1d34c.git.el8_4.2 +2

Fixes 1 record

TI-2024-02855 CVE-2024-3049 · GHSA-gqh6-f673-ccgc

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

LOW 27

A flaw was found in Booth, a cluster ticket manager.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0053 Published 2024-06-06 Partial fix · 1.1-1.el8_10.1, 1.0-199.1.ac1d34c.git.el8_4.2 +5 CWE-345