Red Hat Security Advisory

RHSA-2024:3660

booth security update

Released 2024-06-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability EUS (v.9.2) booth-1.0-283.1.9d4029a.git.el9_2.1, booth-arbitrator-1.0-283.1.9d4029a.git.el9_2.1, booth-core-1.0-283.1.9d4029a.git.el9_2.1 +2
Red Hat Enterprise Linux Resilient Storage EUS (v.9.2) booth-1.0-283.1.9d4029a.git.el9_2.1, booth-arbitrator-1.0-283.1.9d4029a.git.el9_2.1, booth-core-1.0-283.1.9d4029a.git.el9_2.1 +2

Fixes 1 record

TI-2024-02855 CVE-2024-3049 · GHSA-gqh6-f673-ccgc

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

LOW 27

A flaw was found in Booth, a cluster ticket manager.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0053 Published 2024-06-06 Partial fix · 1.1-1.el8_10.1, 1.0-199.1.ac1d34c.git.el8_4.2 +5 CWE-345