Stay Secure with the Latest Linux Advisories

security advisoryremote executionimportant

RedHat: RHSA-2023:4889-01 Important: DevWorkspace Operator 0.22 Release

Red Hat DevWorkspace Operator 0.22 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: DevWorkspace Operator 0.22 release Advisory ID: RHSA-2023:4889-01 Product: DEVWORKSPACE Advisory URL: https://access.redhat.com/errata/RHSA-2023:4889 Issue date: 2023-08-30 CVE Names: CVE-2023-2602 CVE-2023-2603 CVE-2023-27536 CVE-2023-28321 CVE-2023-28484 CVE-2023-29469 CVE-2023-38408 ===================================================================== 1. Summary: Red Hat DevWorkspace Operator 0.22 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: The DevWorkspace Operator extends OpenShift to provide DevWorkspace support. Security Fix(es): * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 4. Bugs fixed (https://bugzilla.redhat.com/): 2224173 - CVE-2023-38408 openssh: Remote code execution in ssh-agent PKCS#11 support 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): CRW-4641 - Release DevWorkspace Operator v0.22 6. References: https://access.redhat.com/security/cve/CVE-2023-2602 https://access.redhat.com/security/cve/CVE-2023-2603 https://access.redhat.com/security/cve/CVE-2023-27536 https://access.redhat.com/security/cve/CVE-2023-28321 https://access.redhat.com/security/cve/CVE-2023-28484 https://access.redhat.com/security/cve/CVE-2023-29469 https://access.redhat.com/security/cve/CVE-2023-38408 https://access.redhat.com/security/updates/classification#important 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJk7+KOAAoJENzjgjWX9erEOKQP/0EHTmOZXTTPDoYmghH9Fcjg 2+I/HSTn6Tw3hjcK8WJu9oZ/ILI6cyFZNMeEfwt0t0q8Rrpl2aO9kGbgSvh+34eB nm0u6BHml3IGK2dMK3HtWUtUy3AKoWinCW1nuX8a8Ti3GHadDzXvXTuBmGzErFin 9TK+44+njTcJb8KF7WWWINKAEft6MbhU/9Ka0gJ2oEE1b5NacfBslYtPsxNSzn50 tlyVX4fpPbaGNitkrqbakem3szzBhRcJE4xuaXXxV1GMsP67wc6iSALQDmSqf9YD Vas1evj3qVaKwoeum9+holMhYSgdksL891mBA7bViY213vBxlQYBfLyjEKviJp2b nkc86ZDPgDf3rJCKZdsSwWTSLdkyo9WDirMU2Y00hMTXAnf+88G01IFax/rL5PIb vy2szr9w/Ne9jqbeHNQG14nrYroLDtnlD7F3kxavxIl3/zoYxfkDuDM9y3CZrJjO MrM9m5RNXBWfGXZHUh8+BrrY3PaZOwmt1xZ4M6nV+mS3byYf4H+M0Cf/dwRckCGf 1Rx0Y6NT5fGQBoq+BuP2QOi6JiYBHlh0an1rclil2U2ItO7u4DbtAlGGWGvmfbmQ u5FyOoRk23GCDGvpb+nJcwQvx+PMIwnhQQCPptdtXerl9MZfx9yYvWnIfvbPSinz t8LZshP5tSCpVgBWplIK =gNjz -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Canonical unveils the significant launch of Snapcraft 5.12, focusing on performance enhancements and bug fixes.. DevWorkspace Operator, Red Hat, Remote Code Execution, Security Advisory, Important Update. . Severity: Important. LinuxSecurity.com Team

Aug 31, 2023 •Important Red Hat