Linux · Security advisory · August 22, 2023

ALSA-2023:4708: Security update for 5 packages

ALSA-2023:4708, released August 22, 2023, fixes 1 CVE across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0024
15th percentile

Fixed package versions

ProductReleaseFixed in
libdnf-plugin-subscription-manageralmalinux 91.29.33.1-2.el9_2.alma.1
python3-cloud-whatalmalinux 91.29.33.1-2.el9_2.alma.1
python3-subscription-manager-rhsmalmalinux 91.29.33.1-2.el9_2.alma.1
subscription-manageralmalinux 91.29.33.1-2.el9_2.alma.1
subscription-manager-plugin-ostreealmalinux 91.29.33.1-2.el9_2.alma.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-3899 dnf-plugin-subscription-manager: The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repos... 7.8 0.0024 None reported
Showing 1 to 1 of 1 1