booth-1.0-251.3.bfb2f92.git.el9.1

The Booth cluster ticket manager is a component to bridge high availability
clusters spanning multiple sites, in particular, to provide decision inputs to
local Pacemaker cluster resource managers. It operates as a distributed
consensus-based service, presumably on a separate physical network. Tickets
facilitated by a Booth formation are the units of authorization that can be
bound to certain resources. This will ensure that the resources are run at only
one (granted) site at a time.

Security Fix(es):

* booth: authfile directive in booth config file is completely ignored.
(CVE-2022-2553)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2022-2553
The authfile directive in the booth config file is ignored, preventing use of
authentication in communications from node to node. As a result, nodes that do
not have the correct authentication key are not prevented from communicating
with other nodes in the cluster.