ALSA-2023:4706

Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:4706.json
Aliases
Published
2023-08-22T00:00:00Z
Modified
2023-08-31T13:52:34Z
Details

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform.

Security Fix(es):

  • subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / dnf-plugin-subscription-manager

Source Details

Package Name
dnf-plugin-subscription-manager

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / python3-cloud-what

Source Details

Package Name
python3-cloud-what

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / python3-subscription-manager-rhsm

Source Details

Package Name
python3-subscription-manager-rhsm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / python3-syspurpose

Source Details

Package Name
python3-syspurpose

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / subscription-manager

Source Details

Package Name
subscription-manager

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / subscription-manager-migration

Source Details

Package Name
subscription-manager-migration

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / subscription-manager-plugin-ostree

Source Details

Package Name
subscription-manager-plugin-ostree

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1

AlmaLinux:8 / subscription-manager-rhsm-certificates

Source Details

Package Name
subscription-manager-rhsm-certificates

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.28.36-3.el8_8.alma.1