Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2040-1

Опубликовано: 17 июн. 2024
Источник: suse-cvrf

Описание

Security update for booth

This update for booth fixes the following issues:

  • CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP6
booth-1.1+git0.09b0074-150600.3.3.1
openSUSE Leap 15.6
booth-1.1+git0.09b0074-150600.3.3.1
booth-test-1.1+git0.09b0074-150600.3.3.1

Ссылки

Описание

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP6:booth-1.1+git0.09b0074-150600.3.3.1
openSUSE Leap 15.6:booth-1.1+git0.09b0074-150600.3.3.1
openSUSE Leap 15.6:booth-test-1.1+git0.09b0074-150600.3.3.1
Ссылки