Search CVE reports
1 – 2 of 2 results
Some fixes available 4 of 8
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
1 affected package
booth
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| booth | Not affected | Fixed | Fixed | Fixed | Fixed |
Some fixes available 2 of 8
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented...
1 affected package
booth
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| booth | Not affected | Not affected | Fixed | Fixed | Not affected |