Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dnf-plugin-subscription-manager-debuginfo | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-subscription-manager-rhsm-debuginfo | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | rhsm-gtk | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | subscription-manager-debuginfo | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | subscription-manager-debugsource | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | subscription-manager-initial-setup-addon | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | subscription-manager-migration | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | dnf-plugin-subscription-manager | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | dnf-plugin-subscription-manager-debuginfo | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | python3-cloud-what | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | python3-subscription-manager-rhsm | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | python3-subscription-manager-rhsm-debuginfo | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | python3-syspurpose | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | rhsm-icons | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | subscription-manager | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | subscription-manager-cockpit | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | subscription-manager-debuginfo | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | subscription-manager-debugsource | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | subscription-manager-plugin-ostree | 0:1.28.36-3.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | subscription-manager-rhsm-certificates | 0:1.28.36-3.el8_8 |
Vulnerabilities 1
-
High 7.8
Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2225407
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4706.json
-
report
https://access.redhat.com/security/cve/CVE-2023-3899
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3899
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3899