{"id":"ALSA-2023:0303","summary":"Moderate: usbguard security update","details":"The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined policy, USBGuard uses the Linux kernel USB device authorization feature.\n\nSecurity Fix(es):\n\n* usbguard: Fix unauthorized access via D-Bus (CVE-2019-25058)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-02-04T03:31:48.543113Z","published":"2023-01-23T00:00:00Z","related":["CVE-2019-25058"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2023:0303"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2019-25058"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2058465"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2023-0303.html"}],"affected":[{"package":{"name":"usbguard","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/usbguard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-10.el9_1.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:0303.json"}},{"package":{"name":"usbguard-dbus","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/usbguard-dbus"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-10.el9_1.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:0303.json"}},{"package":{"name":"usbguard-notifier","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/usbguard-notifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-10.el9_1.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:0303.json"}},{"package":{"name":"usbguard-selinux","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/usbguard-selinux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-10.el9_1.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:0303.json"}},{"package":{"name":"usbguard-tools","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/usbguard-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-10.el9_1.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:0303.json"}}],"schema_version":"1.7.3"}