On this page: https://rol.redhat.com/rol/app/courses/rh415-9.2/pages/ch01s04
List the required RHSAs to resolve the CVE-2023-38408 CVE.
[root@servera ~]# dnf updateinfo list updates security --cve CVE-2023-38408
...output omitted...
RHSA-2023:4412 Important/Sec. openssh-8.7p1-30.el9_2.x86_64
RHSA-2023:4412 Important/Sec. openssh-clients-8.7p1-30.el9_2.x86_64 RHSA-2023:4412
Important/Sec. openssh-server-8.7p1-30.el9_2.x86_64
I was only able to reproduce the output by using the command mentioned below and dropping the security keyword
dnf updateinfo list updates --cve CVE-2023-38408
If I let the security keyword in, it will give back a complete list, with the same output at point number 2.
@JacquesW Thanks for letting us know, let me check that for you.
@JacquesW I checked from my end and you are right :
I have reported this to our course developers to have it corrected. Thanks for your feedback.
Hi all,
I stumbled about this same issue and @JacquesW was so kind to point me to this thread. Regardless from with the command output I found the commands used in this section unfortunate in general as they do not seem to be backed by the manpage dnf(8).
When reading the manpage only `dnf updateinfo list` is not a valid command. Strange enough that it works it can cause confusion when training delivers commands that are not backed by the official command documentation which the man pages are supposed to be.
For example check the 'Updateinfo command' section in dnf(8) on a RHEL 9 host or the output of `dnf updateinfo --help`. There is now clue for something like `dnf updateinfo list updates`. I checked this with `dnf-4.14.0-17.el9.noarch`.
Can someone explain to me, what's happening here?
Best regards,
Joerg
Red Hat
Learning Community
A collaborative learning environment, enabling open source skill development.