{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:4706","synopsis":"Important: subscription-manager security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for subscription-manager.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Rocky Enterprise Software Foundation entitlement platform.\n\nSecurity Fix(es):\n\n* subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2225407","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2225407","description":""}],"cves":[{"name":"CVE-2023-3899","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-3899","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2023-08-28T18:41:17.781891Z","rpms":{"Rocky Linux 8":{"nvras":["dnf-plugin-subscription-manager-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","dnf-plugin-subscription-manager-debuginfo-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","python3-cloud-what-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","python3-subscription-manager-rhsm-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","python3-subscription-manager-rhsm-debuginfo-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","python3-syspurpose-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","rhsm-icons-0:1.28.36-3.el8_8.rocky.0.1.noarch.rpm","subscription-manager-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","subscription-manager-0:1.28.36-3.el8_8.rocky.0.1.src.rpm","subscription-manager-cockpit-0:1.28.36-3.el8_8.rocky.0.1.noarch.rpm","subscription-manager-debuginfo-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","subscription-manager-debugsource-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","subscription-manager-migration-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","subscription-manager-plugin-ostree-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm","subscription-manager-rhsm-certificates-0:1.28.36-3.el8_8.rocky.0.1.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}