https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T03:14:08.056044+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-3049 CVE-2024-3049 — Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 2026-10-11T03:14:08.306741+00:00

Affected: booth, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions and 3 more

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

 https://vulnerability.circl.lu/vuln/usn-8832-1 USN-8832-1 — booth vulnerability 2026-10-11T03:14:08.306862+00:00

Affected: Ubuntu:Pro:18.04:LTS: booth, Ubuntu:Pro:20.04:LTS: booth, Ubuntu:Pro:22.04:LTS: booth, Ubuntu:Pro:24.04:LTS: booth

It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use this issue to bypass authentication.