Clusterlabs Libqb vulnerabilities

CVE-2023-39976 [CRITICAL] CWE-120 CVE-2023-39976: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the head log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

CVE-2019-12779 [HIGH] CWE-59 CVE-2019-12779: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.