Описание
Security update for booth
This update for booth fixes the following issues:
- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)
Список пакетов
SUSE Linux Enterprise High Availability Extension 15 SP2
booth-1.0-150100.11.6.1
Ссылки
- Link for SUSE-SU-2024:2041-1
- E-Mail link for SUSE-SU-2024:2041-1
- SUSE Security Ratings
- SUSE Bug 1226032
- SUSE CVE CVE-2024-3049 page
Описание
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP2:booth-1.0-150100.11.6.1
Ссылки
- CVE-2024-3049
- SUSE Bug 1226032