Fixed packages 42
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | python-syspurpose | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | rhsm-gtk | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-cockpit | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-debuginfo | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-gui | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-initial-setup-addon | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-migration | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-plugin-container | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-plugin-ostree | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-rhsm | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | subscription-manager-rhsm-certificates | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | rhsm-gtk | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | subscription-manager-cockpit | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | subscription-manager-debuginfo | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | subscription-manager-gui | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | subscription-manager-initial-setup-addon | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | subscription-manager-plugin-ostree | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-syspurpose | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | rhsm-gtk | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-cockpit | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-debuginfo | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-gui | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-initial-setup-addon | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-migration | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-plugin-container | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-plugin-ostree | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-rhsm | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | subscription-manager-rhsm-certificates | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-syspurpose | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | rhsm-gtk | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-cockpit | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-debuginfo | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-gui | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-initial-setup-addon | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-migration | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-plugin-container | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-plugin-ostree | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-rhsm | 0:1.24.52-2.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | subscription-manager-rhsm-certificates | 0:1.24.52-2.el7_9 |
Vulnerabilities 1
-
High 7.8
Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2225407
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4701.json
-
report
https://access.redhat.com/security/cve/CVE-2023-3899
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3899
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3899