Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | booth | 1.0-237-gdd88847-2+deb11u2 |
Vulnerabilities 1
-
Medium 5.9
Booth: specially crafted hash can lead to invalid hmac being accepted by booth server
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.