A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade booth-siteUpgrade boothUpgrade booth-arbitratorUpgrade booth-testUpgrade booth-core | Jun 12, 2024 | Jun 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade booth-arbitratorUpgrade boothUpgrade booth-coreUpgrade booth-siteUpgrade booth-testUpgrade booth-debuginfo | Jun 26, 2024 | Jun 6, 2024 |
| Debian | — | Upgrade booth | Sep 26, 2024 | Jun 6, 2024 |
| Redhat_linux | — | Upgrade booth-coreUpgrade boothUpgrade booth-arbitratorNo solution existsUpgrade booth-debugsourceUpgrade booth-testUpgrade booth-core-debuginfoUpgrade booth-site | Jun 7, 2024 | Jun 6, 2024 |
| Rocky_linux | — | Upgrade booth-core-debuginfoUpgrade boothUpgrade booth-debugsourceUpgrade booth-core | Jun 17, 2024 | Jun 6, 2024 |
| Suse | — | Upgrade booth-testUpgrade booth | Jun 18, 2024 | Jun 6, 2024 |
| Ubuntu | — | Upgrade booth (Ubuntu Pro) | Sep 29, 2026 | Sep 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub