{"id":"CVE-2024-3049","aliases":["ALSA-2024:3659","ALSA-2024:3661","AZL-42530","AZL-42540","DEBIAN-CVE-2024-3049","DLA-3894-1","DSA-5777-1","EUVD-2024-31656","GHSA-gqh6-f673-ccgc","OESA-2024-2048","OESA-2024-2049","OESA-2024-2050","RHSA-2024:3657","RHSA-2024:3658","RHSA-2024:3659","RHSA-2024:3660","RHSA-2024:3661","RHSA-2024:4400","RHSA-2024:4411","RLSA-2024:3659","RLSA-2024:3661","SUSE-SU-2024:2040-1","SUSE-SU-2024:2041-1","SUSE-SU-2024:2042-1","SUSE-SU-2024:2062-1","SUSE-SU-2024:2063-1","SUSE-SU-2024:2251-1","UBUNTU-CVE-2024-3049","USN-8832-1","openSUSE-SU-2024:14045-1"],"status":"published","title":"Booth: specially crafted hash can lead to invalid hmac being accepted by booth server","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0053,"percentile":0.45107,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-345"],"published":"2024-06-06T00:00:00Z","modified":"2026-11-04T21:11:41Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"booth","fixed_in":["1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-arbitrator","fixed_in":["1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-core","fixed_in":["1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-site","fixed_in":["1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-test","fixed_in":["1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth","fixed_in":["1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-arbitrator","fixed_in":["1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-core","fixed_in":["1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-site","fixed_in":["1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-test","fixed_in":["1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"booth","fixed_in":["1.2-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"booth","fixed_in":["1.0-283-g9d4029a-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"booth","fixed_in":["1.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"booth","fixed_in":["1.1-2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"booth","fixed_in":["1.0-237-gdd88847-2+deb11u2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"booth","fixed_in":["1.0-7.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"booth","fixed_in":["1.0-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"booth","fixed_in":["1.1-6.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-core","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-site","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-test","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-core","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-site","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-test","fixed_in":["0:1.0-283.1.9d4029a.git.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-arbitrator","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-debugsource","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-site","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-test","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-site","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-test","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-core","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-site","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-test","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-core","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-site","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-test","fixed_in":["0:1.0-283.1.9d4029a.git.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-arbitrator","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-debugsource","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-site","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-test","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-site","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-test","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-core","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-site","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-test","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-core","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-site","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-test","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"booth","fixed_in":["0:1.1-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"booth","fixed_in":["0:1.1-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"booth","fixed_in":["1.1+git0.09b0074-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"booth","fixed_in":["1.1+git0.09b0074-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"booth","fixed_in":["1.0-150100.11.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"booth","fixed_in":["1.0+20210519.bfb2f92-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"booth","fixed_in":["1.0-150300.18.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"booth","fixed_in":["1.0+20220815.f40c2d5-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"booth","fixed_in":["1.0+20220815.f40c2d5-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability GEO Extension 12 SP5","package":"booth","fixed_in":["1.0-42.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"booth","fixed_in":["1.0-6ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"booth","fixed_in":["1.0-174-gce9f821-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"booth","fixed_in":["1.0-237-gdd88847-4ubuntu2.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"booth","fixed_in":["1.1-1ubuntu4+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"booth","fixed_in":["1.2+git0.322fea0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-283-g9d4029a-2+deb12u1"}]}],"versions":["1.0-283-g9d4029a-2"]},{"source":"osv","ecosystem":"Debian:13","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-237-gdd88847-2+deb11u2"}]}],"versions":["1.0-237-gdd88847-2","1.0-237-gdd88847-2+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-283-g9d4029a-2+deb12u1"}]}],"versions":["1.0-283-g9d4029a-2"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-7.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-6.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-283.1.9d4029a.git.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1+git0.09b0074-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1+git0.09b0074-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150100.11.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+20210519.bfb2f92-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150300.18.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+20220815.f40c2d5-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+20220815.f40c2d5-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability GEO Extension 12 SP5","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-42.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-6ubuntu1+esm1"}]}],"versions":["1.0-3","1.0-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-174-gce9f821-1ubuntu0.2+esm1"}]}],"versions":["1.0-162-g27f917f-2","1.0-174-gce9f821-1","1.0-174-gce9f821-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-237-gdd88847-4ubuntu2.2+esm1"}]}],"versions":["1.0-237-gdd88847-2","1.0-237-gdd88847-4ubuntu1","1.0-237-gdd88847-4ubuntu2","1.0-237-gdd88847-4ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1ubuntu4+esm1"}]}],"versions":["1.0-237-gdd88847-4ubuntu3","1.1-1ubuntu1","1.1-1ubuntu3","1.1-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-2ubuntu1","1.2-2ubuntu2","1.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-6ubuntu1+esm1"}]}],"versions":["1.0-3","1.0-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-174-gce9f821-1ubuntu0.2+esm1"}]}],"versions":["1.0-162-g27f917f-2","1.0-174-gce9f821-1","1.0-174-gce9f821-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-237-gdd88847-4ubuntu2.2+esm1"}]}],"versions":["1.0-237-gdd88847-2","1.0-237-gdd88847-4ubuntu1","1.0-237-gdd88847-4ubuntu2","1.0-237-gdd88847-4ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1ubuntu4+esm1"}]}],"versions":["1.0-237-gdd88847-4ubuntu3","1.1-1ubuntu1","1.1-1ubuntu3","1.1-1ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2+git0.322fea0-1.1"}]}]}],"products":[{"vendor":"clusterlabs","product":"booth"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_server_update_services_for_sap_solutions"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:3657","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3658","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3659","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3660","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3661","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4400","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4411","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3049","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272082","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report"]},{"url":"https://github.com/ClusterLabs/booth/pull/142","tags":["fix","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERCFM3HXFJKLEMMWU3CZLPKH5LZAEDAN/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPK5BHYOB7CFFRQAN55YV5LH44PWHMQD/","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00037.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3049","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPK5BHYOB7CFFRQAN55YV5LH44PWHMQD"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERCFM3HXFJKLEMMWU3CZLPKH5LZAEDAN"},{"url":"https://github.com/advisories/GHSA-gqh6-f673-ccgc"},{"url":"https://bugzilla.redhat.com/2272082","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3659.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-3661.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3049.json","tags":["advisory"]},{"url":"https://github.com/ClusterLabs/booth","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-3049","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2048","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2049","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2050","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3657.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3049","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3658.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3659.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3660.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3661.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4400.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4411.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3659","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3661","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242040-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226032","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3049","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242041-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242042-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242062-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242063-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242251-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-3049","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8832-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-3049","title":"Booth: specially crafted hash can lead to invalid hmac being accepted by booth server","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T05:30:04.137Z","modified":"2026-11-04T21:11:41.171Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-345"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2024-31656","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T05:30:04Z","modified":"2026-11-04T21:11:41Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-04T22:46:32.144626Z"}],"ghsa":[{"id":"GHSA-gqh6-f673-ccgc","title":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to...","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T06:30:30Z","modified":"2025-10-02T15:32:20Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:03:50.19975Z"}],"nvd":[{"id":"CVE-2024-3049","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T06:15:09.55Z","modified":"2026-11-04T22:17:21.14Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-04T23:43:36.946093Z"}],"osv":[{"id":"AZL-42530","title":"CVE-2024-3049 affecting package booth 1.0-8","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T06:15:09Z","modified":"2026-04-21T04:29:36.635374Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42540","title":"CVE-2024-3049 affecting package booth for versions less than 1.2-1","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T06:15:09Z","modified":"2026-04-21T04:54:06.319203Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"CVE-2024-3049","title":"Booth: specially crafted hash can lead to invalid hmac being accepted by booth server","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T05:30:04.137Z","modified":"2026-11-05T21:16:03.086114295Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-345"],"updated_at":"2026-11-05T22:00:58.054534Z"},{"id":"DEBIAN-CVE-2024-3049","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T06:15:09.55Z","modified":"2026-11-05T09:47:34.035984147Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2024-2048","title":"booth security update","description":"Booth manages tickets which authorize cluster sites located in geographically dispersed locations to run resources. It facilitates support of geographically distributed clustering in Pacemaker.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.(CVE-2024-3049)","status":"published","published":"2024-08-23T11:07:31Z","modified":"2026-08-18T01:18:35.170069156Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-2049","title":"booth security update","description":"Booth manages tickets which authorize cluster sites located in geographically dispersed locations to run resources. It facilitates support of geographically distributed clustering in Pacemaker.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.(CVE-2024-3049)","status":"published","published":"2024-08-23T11:07:31Z","modified":"2026-08-18T01:18:35.63138624Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-2050","title":"booth security update","description":"Booth manages tickets which authorize cluster sites located in geographically dispersed locations to run resources. It facilitates support of geographically distributed clustering in Pacemaker.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.(CVE-2024-3049)","status":"published","published":"2024-08-23T11:07:31Z","modified":"2026-08-18T01:17:26.830967826Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:3657","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:14Z","modified":"2026-06-29T10:58:40Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3658","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:23Z","modified":"2026-06-29T10:58:41Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3659","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:31Z","modified":"2026-06-29T10:58:42Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3660","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:41Z","modified":"2026-06-29T10:58:42Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3661","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:50Z","modified":"2026-06-29T10:58:43Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4400","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:25Z","modified":"2026-06-29T10:59:22Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4411","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T21:31:34Z","modified":"2026-06-29T10:59:23Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2024-3049","description":"A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.","status":"published","published":"2024-06-06T06:15:00Z","modified":"2026-10-17T12:56:44.367053474Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"ALSA-2024:3659","title":"Important: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability\nclusters spanning multiple sites, in particular, to provide decision inputs to\nlocal Pacemaker cluster resource managers. It operates as a distributed\nconsensus-based service, presumably on a separate physical network. Tickets\nfacilitated by a Booth formation are the units of authorization that can be\nbound to certain resources. This will ensure that the resources are run at only\none (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server  (CVE-2024-3049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-06T00:00:00Z","modified":"2026-10-29T11:02:21.381434493Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3661","title":"Important: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server (CVE-2024-3049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-06T00:00:00Z","modified":"2026-10-29T11:32:08.739214011Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"DLA-3894-1","title":"booth - security update","status":"published","published":"2024-09-24T00:00:00Z","modified":"2026-03-09T01:23:23.74188Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5777-1","title":"booth - security update","status":"published","published":"2024-09-27T00:00:00Z","modified":"2026-03-09T02:11:36.338651Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:14045-1","title":"booth-1.2+git0.322fea0-1.1 on GA media","description":"These are all security issues fixed in the booth-1.2+git0.322fea0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:16:00.557757Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:3659","title":"Important: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability\nclusters spanning multiple sites, in particular, to provide decision inputs to\nlocal Pacemaker cluster resource managers. It operates as a distributed\nconsensus-based service, presumably on a separate physical network. Tickets\nfacilitated by a Booth formation are the units of authorization that can be\nbound to certain resources. This will ensure that the resources are run at only\none (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server  (CVE-2024-3049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-14T13:59:33.077645Z","modified":"2026-02-04T15:15:06.711934Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2024:3661","title":"Important: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server (CVE-2024-3049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-14T14:00:41.081783Z","modified":"2026-02-04T15:00:06.050009Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:2040-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)\n","status":"published","published":"2024-06-17T07:32:39Z","modified":"2026-02-04T04:40:33.201081Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2041-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)\n","status":"published","published":"2024-06-17T07:32:56Z","modified":"2026-02-04T03:07:19.779735Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2042-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)\n","status":"published","published":"2024-06-17T07:33:04Z","modified":"2026-02-04T03:57:23.691248Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2062-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)\n","status":"published","published":"2024-06-18T11:14:08Z","modified":"2026-02-04T02:33:37.779916Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2063-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)\n","status":"published","published":"2024-06-18T11:14:17Z","modified":"2026-02-04T03:02:50.186556Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2251-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)\n","status":"published","published":"2024-07-01T12:04:35Z","modified":"2025-05-02T04:36:41.875562Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-8832-1","title":"booth vulnerability","description":"It was discovered that Booth did not properly validate message\nauthentication codes under certain circumstances. A remote attacker\ncould possibly use this issue to bypass authentication.","status":"published","published":"2026-09-28T14:20:51Z","modified":"2026-09-28T22:57:43.97131912Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}