[SECURITY] Fedora 45 Update: booth-1.2-10.fc45

Booth manages tickets which authorize cluster sites located in geographically dispersed locations to run resources. It facilitates support of geographically distributed clustering in Pacemaker...

Rocky Linux 8 [CIQ] Security Update: booth / booth-arbitrator / booth-core / booth-core-debuginfo / etc (crlsa-2024_3659)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243659 advisory. booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server CVE-2024-3049 Tenable has extracted the preceding description block directly...

Rocky Linux 8 [CIQ] Security Update: booth / booth-arbitrator / booth-core / booth-core-debuginfo / etc (crlsa-2022_6439)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226439 advisory. booth: authfile directive in booth config file is completely ignored. CVE-2022-2553 Tenable has extracted the preceding description block directly from the CIQ...

Ubuntu 18.04 LTS / 24.04 LTS : Booth vulnerability (USN-8832-1)

The remote Ubuntu 18.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8832-1 advisory. It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use...

USN-8832-1: Booth vulnerability

It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use this issue to bypass authentication...

USN-8832-1 booth vulnerability

It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use this issue to bypass authentication...

Preview: Cisco Talos at Black Hat USA 2026

We're looking forward to having some great conversations with those of you heading to the desert for Hacker Summer Camp 2026. We have a presence within the Cisco and Splunk booth 2633 during Black Hat where you can chat to us about our latest threat research, incident response, and how Talos powe...

MiracleLinux 8 : booth-1.0-199.1.ac1d34c.git.el8.1 (AXSA:2022-3841:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3841:01 advisory. booth: authfile directive in booth config file is completely ignored. CVE-2022-2553 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : booth-1.0-251.3.bfb2f92.git.el9.1 (AXSA:2023-5095:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5095:03 advisory. booth: authfile directive in booth config file is completely ignored. CVE-2022-2553 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : booth-1.1-1.el8_10.1 (AXSA:2024-8489:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8489:04 advisory. booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server CVE-2024-3049 Tenable has extracted the preceding description block...

MiracleLinux 9 : booth-1.1-1.el9_4.1 (AXSA:2024-8153:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8153:02 advisory. booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server CVE-2024-3049 Tenable has extracted the preceding description block...

CVE-2022-2553 affecting package booth for versions less than 1.0-8

CVE-2022-2553 affecting package booth for versions less than 1.0-8. A patched version of the package is available...

CVE-2024-3049 affecting package booth for versions less than 1.2-1

CVE-2024-3049 affecting package booth for versions less than 1.2-1. An upgraded version of the package is available that resolves this issue...

A week in security (December 15 – December 21)

Last week on Malwarebytes Labs: CISA warns ASUS Live Update backdoor is still exploitable, seven years on The ghosts of WhatsApp: How GhostPairing hijacks accounts Chrome extension slurps up AI chats after users installed it for privacy Two Chrome flaws could be triggered by simply browsing the...

TencentOS Server 3: booth (TSSA-2022:0232)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0232 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EUVD-2008-4745

Malware in sbrugna...

EUVD-2024-31656

Malicious code in bioql PyPI...

MAL-2025-34988 Malicious code in test-mlw2-booth-banks (npm)

The package test-mlw2-booth-banks was found to contain malicious code...

Malicious code in test-mlw2-booth-banks (npm)

The package test-mlw2-booth-banks was found to contain malicious code...

TencentOS Server 3: booth (TSSA-2024:0390)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0390 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...