Vulnerability in satellite-5-client module update
Summary
ALBA-2019:3474: satellite-5-client module update. Affects dnf-plugin-spacewalk across 3 version ranges.
< 2.8.5-11.module_el8.3.0+2053+3ddf2832
< 2.8.5-11.module_el8.4.0+2249+3ddf2832
< 2.8.5-11.module_el8.5.0+71+8f3a675d
Fixed in 2.8.5-11.module_el8.3.0+2053+3ddf2832, 2.8.5-11.module_el8.4.0+2249+3ddf2832 or 2.8.5-11.module_el8.5.0+71+8f3a675d, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The satellite-5-client module is responsible for providing programs and libraries that enable systems to utilize provisioning, monitoring, and configuration management capabilities offered by AlmaLinux Satellite 5. It is an essential component for managing and maintaining AlmaLinux systems.
Vulnerability Detail
This vulnerability in the satellite-5-client module allows for potential security issues and bugs. The specific vulnerability is related to a build dependency on Python 2 (gtk-builder-convert) that has been dropped. Additionally, the dnf-plugin-spacewalk now displays the correct message about the connection to AlmaLinux Satellite. These issues can lead to various problems, including security vulnerabilities and incorrect information being displayed.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update dnf-plugin-spacewalk-
< 2.8.5-11.module_el8.3.0+2053+3ddf28322.8.5-11.module_el8.3.0+2053+3ddf2832 -
< 2.8.5-11.module_el8.4.0+2249+3ddf28322.8.5-11.module_el8.4.0+2249+3ddf2832 -
< 2.8.5-11.module_el8.5.0+71+8f3a675d2.8.5-11.module_el8.5.0+71+8f3a675d
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the satellite-5-client module can lead to security issues and incorrect information being displayed. It is recommended to update the affected packages to the fixed versions mentioned in the provided source link. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dnf-plugin-spacewalk →
FAQ
The satellite-5-client module provides programs and libraries that allow systems to use provisioning, monitoring, and configuration management capabilities provided by AlmaLinux Satellite 5.
This vulnerability can lead to security issues and incorrect information being displayed.
To fix this vulnerability, update the affected packages to the fixed versions mentioned in the provided source link.
No specific workaround has been mentioned for this vulnerability.
You can find more information about this vulnerability in the provided source link.
References
Related vulnerabilities
Recent vulnerabilities recorded for dnf-plugin-spacewalk.
