Subscription Manager Bug Fix and Enhancement Update - ALBA-2021:4390

Summary

09/11/2021
N/A
Yes i
Unrated
Not published

ALBA-2021:4390: subscription-manager bug fix and enhancement update. Affects subscription-manager-migration versions < 1.28.21-3.el8.alma. Fixed in 1.28.21-3.el8.alma. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

Subscription Manager is a package management tool used in AlmaLinux 8. It provides a way to manage software subscriptions and entitlements on the system. The package 'subscription-manager-migration' is specifically responsible for handling the migration process of subscription data. This vulnerability affects version 0 of the package and is fixed in version 1.28.21-3.el8.alma.

Vulnerability Detail

The vulnerability in subscription-manager-migration (version 0) allows for potential security risks and functional issues. It could lead to unauthorized access, data leakage, or system instability. The specific technical details of the vulnerability are not provided in the given information.

How To Fix

Minimum fixed version

1.28.21-3.el8.alma

This is the first release that contains the fix.

sudo dnf update subscription-manager-migration

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Conclusion

The 'subscription-manager-migration' package in AlmaLinux 8 has a vulnerability that can be fixed by updating to version 1.28.21-3.el8.alma or later. It is recommended to apply the fix to mitigate potential security risks and ensure system stability. For further support on vulnerability remediation, contact DevNack.com.

See every vulnerability recorded for subscription-manager-migration →

Share this vulnerability

FAQ

Subscription Manager is a package management tool used in AlmaLinux 8 to manage software subscriptions and entitlements on the system.

'subscription-manager-migration' package is responsible for handling the migration process of subscription data.

The vulnerability could lead to unauthorized access, data leakage, or system instability.

To fix the vulnerability, update the 'subscription-manager-migration' package to version 1.28.21-3.el8.alma or later.

For more information, refer to the AlmaLinux Release Notes linked in the References section of the vulnerability details.

Related vulnerabilities

Recent vulnerabilities recorded for subscription-manager-migration.

How To Fix

Minimum fixed version

1.28.21-3.el8.alma

This is the first release that contains the fix.

sudo dnf update subscription-manager-migration

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback