{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:4708","synopsis":"Important: subscription-manager security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for subscription-manager.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Rocky Enterprise Software Foundation entitlement platform.\n\nSecurity Fix(es):\n\n* subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2225407","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2225407","description":""}],"cves":[{"name":"CVE-2023-3899","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-3899","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2023-08-24T04:21:33.856417Z","rpms":{"Rocky Linux 9":{"nvras":["libdnf-plugin-subscription-manager-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","libdnf-plugin-subscription-manager-debuginfo-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","python3-cloud-what-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","python3-subscription-manager-rhsm-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","python3-subscription-manager-rhsm-debuginfo-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","subscription-manager-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","subscription-manager-0:1.29.33.1-2.el9_2.rocky.0.1.src.rpm","subscription-manager-debuginfo-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","subscription-manager-debugsource-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm","subscription-manager-plugin-ostree-0:1.29.33.1-2.el9_2.rocky.0.1.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}