Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::baseos | libdnf-plugin-subscription-manager | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | libdnf-plugin-subscription-manager-debuginfo | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3-cloud-what | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3-subscription-manager-rhsm | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3-subscription-manager-rhsm-debuginfo | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | subscription-manager | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | subscription-manager-debuginfo | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | subscription-manager-debugsource | 0:1.29.33.1-2.el9_2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | subscription-manager-plugin-ostree | 0:1.29.33.1-2.el9_2 |
Vulnerabilities 1
-
High 7.8
Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2225407
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4708.json
-
report
https://access.redhat.com/security/cve/CVE-2023-3899
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3899
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3899