PHPJabbers Taxi Booking version 2.0 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Taxi Booking 2.0 - Reflected XSS# Exploit Author: CraCkEr# Date: 22/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/taxi-booking-script/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4116## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpGET parameter 'index' is vulnerable to RXSShttps://website/index.php?controller=pjFrontPublic&action=pjActionSearch&locale=1&index=[XSS][-] Done

PHPJabbers Taxi Booking 2.0 Cross Site Scripting

PHPJabbers Cleaning Business version 1.0 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Cleaning Business 1.0 - Reflected XSS# Exploit Author: CraCkEr# Date: 21/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/cleaning-business-software/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4115## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpGET parameter 'index' is vulnerable to RXSShttps://website/index.php?controller=pjFront&action=pjActionServices&locale=1&index=[XSS][-] Done

PHPJabbers Cleaning Business 1.0 Cross Site Scripting

PHPJabbers Night Club Booking version 1.0 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Night Club Booking 1.0 - Reflected XSS# Exploit Author: CraCkEr# Date: 21/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/night-club-booking-software/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4114## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpGET parameter 'index' is vulnerable to RXSShttps://website/index.php?controller=pjFront&action=pjActionSearch&session_id=&locale=1&index=[XSS]&date=[-] Done

PHPJabbers Night Club Booking 1.0 Cross Site Scripting

PHPJabbers Service Booking Script version 1.0 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Service Booking Script 1.0 - Reflected XSS# Exploit Author: CraCkEr# Date: 21/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/service-booking-script/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4113## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpGET parameter 'index' is vulnerable to RXSShttps://website/index.php?controller=pjFrontPublic&action=pjActionServices&locale=1&index=[XSS][-] Done

PHPJabbers Service Booking Script 1.0 Cross Site Scripting

PHPJabbers Shuttle Booking Software version 1.0 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS# Exploit Author: CraCkEr# Date: 20/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/shuttle-booking-software/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4112## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpURL parameter is vulnerable to RXSShttps://website/index.php/gm5rj"><script>alert(1)</script>bwude?controller=pjAdmin&action=pjActionLogin&err=1[-] Done

PHPJabbers Shuttle Booking Software 1.0 Cross Site Scripting

PHPJabbers Bus Reservation System version 1.1 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Bus Reservation System 1.1 - Reflected XSS# Exploit Author: CraCkEr# Date: 20/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/bus-reservation-system/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4111## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpGET parameter 'index' is vulnerable to RXSShttps://website/index.php?controller=pjFrontPublic&action=pjActionSearch&locale=1&hide=0&index=[XSS]&session_id=Path: /index.phpGET parameter 'pickup_id' is vulnerable to RXSShttps://website/index.php?controller=pjFrontEnd&action=pjActionGetLocations&locale=1&hide=0&index=4005&pickup_id=[XSS]&session_id=[-] Done

PHPJabbers Bus Reservation System 1.1 Cross Site Scripting

PHPJabbers Availability Booking Calendar version 5.0 suffers from a cross site scripting vulnerability.

    # Exploit Title: PHPJabbers Availability Booking Calendar 5.0 - Reflected XSS# Exploit Author: CraCkEr# Date: 20/07/2023# Vendor: PHPJabbers# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/availability-booking-calendar/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4110## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /index.phpGET parameter 'session_id' is vulnerable to RXSShttps://website/index.php?controller=pjFront&action=pjActionGetBookingForm&session_id=[XSS]&cid=1&view=1&month=7&year=2023&start_dt=&end_dt=&locale=&index=0[-] Done

PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting

Joomla JLex GuestBook extension version 1.6.4 suffers from a cross site scripting vulnerability.

    # Exploit Title: JLex GuestBook 1.6.4 - Reflected XSS# Exploit Author: CraCkEr# Date: 01/08/2023# Vendor: JLexArt# Vendor Homepage: https://jlexart.com/# Software Link: https://extensions.joomla.org/extension/contacts-and-feedback/guest-book/jlex-guestbook/# Demo: https://jlexguestbook.jlexart.com/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site ## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /u/perry-705GET parameter 'q' is vulnerable to XSShttp://website/u/perry-705?q=[XSS]&wl=1XSS Payloads:db8ck"onfocus="confirm(1)"autofocus="xwu0k[-] Done

Joomla JLex GuestBook 1.6.4 Cross Site Scripting

Red Hat Security Advisory 2023-4428-01 - OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Issues addressed include a code execution vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: openssh security update  
Advisory ID:       RHSA-2023:4428-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4428  
Issue date:        2023-08-02  
CVE Names:         CVE-2023-38408   
=====================================================================

1. Summary:

An update for openssh is now available for Red Hat Enterprise Linux 6  
Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Server (v. 6 ELS) - i386, s390x, x86_64  
Red Hat Enterprise Linux Server Optional (v. 6 ELS) - i386, s390x, x86_64

3. Description:

OpenSSH is an SSH protocol implementation supported by a number of Linux,  
UNIX, and similar operating systems. It includes the core files necessary  
for both the OpenSSH client and server.

Security Fix(es):

* openssh: Remote code execution in ssh-agent PKCS#11 support  
(CVE-2023-38408)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the OpenSSH server daemon (sshd) will be  
restarted automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

2224173 - CVE-2023-38408 openssh: Remote code execution in ssh-agent PKCS#11 support

6. Package List:

Red Hat Enterprise Linux Server (v. 6 ELS):

Source:  
openssh-5.3p1-125.el6_10.src.rpm

i386:  
openssh-5.3p1-125.el6_10.i686.rpm  
openssh-askpass-5.3p1-125.el6_10.i686.rpm  
openssh-clients-5.3p1-125.el6_10.i686.rpm  
openssh-debuginfo-5.3p1-125.el6_10.i686.rpm  
openssh-server-5.3p1-125.el6_10.i686.rpm

s390x:  
openssh-5.3p1-125.el6_10.s390x.rpm  
openssh-askpass-5.3p1-125.el6_10.s390x.rpm  
openssh-clients-5.3p1-125.el6_10.s390x.rpm  
openssh-debuginfo-5.3p1-125.el6_10.s390x.rpm  
openssh-server-5.3p1-125.el6_10.s390x.rpm

x86_64:  
openssh-5.3p1-125.el6_10.x86_64.rpm  
openssh-askpass-5.3p1-125.el6_10.x86_64.rpm  
openssh-clients-5.3p1-125.el6_10.x86_64.rpm  
openssh-debuginfo-5.3p1-125.el6_10.x86_64.rpm  
openssh-server-5.3p1-125.el6_10.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 6 ELS):

i386:  
openssh-debuginfo-5.3p1-125.el6_10.i686.rpm  
openssh-ldap-5.3p1-125.el6_10.i686.rpm  
pam_ssh_agent_auth-0.9.3-125.el6_10.i686.rpm

s390x:  
openssh-debuginfo-5.3p1-125.el6_10.s390.rpm  
openssh-debuginfo-5.3p1-125.el6_10.s390x.rpm  
openssh-ldap-5.3p1-125.el6_10.s390x.rpm  
pam_ssh_agent_auth-0.9.3-125.el6_10.s390.rpm  
pam_ssh_agent_auth-0.9.3-125.el6_10.s390x.rpm

x86_64:  
openssh-debuginfo-5.3p1-125.el6_10.i686.rpm  
openssh-debuginfo-5.3p1-125.el6_10.x86_64.rpm  
openssh-ldap-5.3p1-125.el6_10.x86_64.rpm  
pam_ssh_agent_auth-0.9.3-125.el6_10.i686.rpm  
pam_ssh_agent_auth-0.9.3-125.el6_10.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2023-38408  
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJkyhHIAAoJENzjgjWX9erEyKQP/3Qfu9Y6bUpoq+STXpRiIRB/  
QZ35/gRqOWYX7sqKwdxtXpuVmP2GzSObQCglq9aqY0BXa92xJGJ6aKxize6wC0Rf  
1kxZr46Jlgc1irPsPqy2hZCnFBuE+lgEWlKnIKXNQdGp/sF2T4CQeqrSIANZ+rHf  
vVdbq01idsVoiTcqt8LK/zMkXvRG4z14TkufcZw8nyaGyApmJydALitey1pn9WXF  
HHrsoUmr8AkhETTitN1a0SX7qVgs8BdlWoWdpY1JWPYiIHSoSbUDOQdcqK5sGZYK  
0xkS+QeQmcNeEXESbEz7o1IThXdHiBjM6NhntoDikN1Oc7/SftG5vm8i8C5JQJY7  
odbYEFF1BYWlQ1i4ulaZSmybJRvQ5S/WrqzkoXetqoCir/FrJ68RaUi5j/awtkG9  
ekOaNH2jAszXCZnAX8VivOht0v/itIYnBsSza2h/kmOHo8MDZqSlrmg4z5rn6Cbw  
pGXn8sntaE3Us/qvedRLZXzaTYtX9QeUEj/eWuqFTPf8V4PSjTaz44TWKDp0/GQk  
2p7inDh0sVQhlkLyvNT0h6aQ0wn2RUASs1RrKefIy7wedX73vUn2EEoeFJTrBjUE  
Bl04+dTjfjzDQ97MgdoPnAQxTPHH/i4Hz5rVxuya++QnLCCp2uD6ESahB2Gg9gI7  
7ZJPejaTEhXGOUdrAylm  
=VfOr  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2023-4428-01

Red Hat Security Advisory 2023-4413-01 - OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Issues addressed include a code execution vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: openssh security update  
Advisory ID:       RHSA-2023:4413-01  
Product:           Red Hat Enterprise Linux  
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:4413  
Issue date:        2023-08-01  
CVE Names:         CVE-2023-38408   
=====================================================================

1. Summary:

An update for openssh is now available for Red Hat Enterprise Linux 8.6  
Extended Update Support.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64  
Red Hat Enterprise Linux BaseOS EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64

3. Description:

OpenSSH is an SSH protocol implementation supported by a number of Linux,  
UNIX, and similar operating systems. It includes the core files necessary  
for both the OpenSSH client and server.

Security Fix(es):

* openssh: Remote code execution in ssh-agent PKCS#11 support  
(CVE-2023-38408)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes  
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the OpenSSH server daemon (sshd) will be  
restarted automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

2224173 - CVE-2023-38408 openssh: Remote code execution in ssh-agent PKCS#11 support

6. Package List:

Red Hat Enterprise Linux AppStream EUS (v.8.6):

aarch64:  
openssh-askpass-8.0p1-15.el8_6.aarch64.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-debugsource-8.0p1-15.el8_6.aarch64.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.aarch64.rpm

ppc64le:  
openssh-askpass-8.0p1-15.el8_6.ppc64le.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-debugsource-8.0p1-15.el8_6.ppc64le.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.ppc64le.rpm

s390x:  
openssh-askpass-8.0p1-15.el8_6.s390x.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-debugsource-8.0p1-15.el8_6.s390x.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.s390x.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.s390x.rpm

x86_64:  
openssh-askpass-8.0p1-15.el8_6.x86_64.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-debugsource-8.0p1-15.el8_6.x86_64.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.x86_64.rpm

Red Hat Enterprise Linux BaseOS EUS (v.8.6):

Source:  
openssh-8.0p1-15.el8_6.src.rpm

aarch64:  
openssh-8.0p1-15.el8_6.aarch64.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-cavs-8.0p1-15.el8_6.aarch64.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-clients-8.0p1-15.el8_6.aarch64.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-debugsource-8.0p1-15.el8_6.aarch64.rpm  
openssh-keycat-8.0p1-15.el8_6.aarch64.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-ldap-8.0p1-15.el8_6.aarch64.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
openssh-server-8.0p1-15.el8_6.aarch64.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.aarch64.rpm  
pam_ssh_agent_auth-0.10.3-7.15.el8_6.aarch64.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.aarch64.rpm

ppc64le:  
openssh-8.0p1-15.el8_6.ppc64le.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-cavs-8.0p1-15.el8_6.ppc64le.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-clients-8.0p1-15.el8_6.ppc64le.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-debugsource-8.0p1-15.el8_6.ppc64le.rpm  
openssh-keycat-8.0p1-15.el8_6.ppc64le.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-ldap-8.0p1-15.el8_6.ppc64le.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
openssh-server-8.0p1-15.el8_6.ppc64le.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.ppc64le.rpm  
pam_ssh_agent_auth-0.10.3-7.15.el8_6.ppc64le.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.ppc64le.rpm

s390x:  
openssh-8.0p1-15.el8_6.s390x.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-cavs-8.0p1-15.el8_6.s390x.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-clients-8.0p1-15.el8_6.s390x.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-debugsource-8.0p1-15.el8_6.s390x.rpm  
openssh-keycat-8.0p1-15.el8_6.s390x.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-ldap-8.0p1-15.el8_6.s390x.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.s390x.rpm  
openssh-server-8.0p1-15.el8_6.s390x.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.s390x.rpm  
pam_ssh_agent_auth-0.10.3-7.15.el8_6.s390x.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.s390x.rpm

x86_64:  
openssh-8.0p1-15.el8_6.x86_64.rpm  
openssh-askpass-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-cavs-8.0p1-15.el8_6.x86_64.rpm  
openssh-cavs-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-clients-8.0p1-15.el8_6.x86_64.rpm  
openssh-clients-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-debugsource-8.0p1-15.el8_6.x86_64.rpm  
openssh-keycat-8.0p1-15.el8_6.x86_64.rpm  
openssh-keycat-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-ldap-8.0p1-15.el8_6.x86_64.rpm  
openssh-ldap-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
openssh-server-8.0p1-15.el8_6.x86_64.rpm  
openssh-server-debuginfo-8.0p1-15.el8_6.x86_64.rpm  
pam_ssh_agent_auth-0.10.3-7.15.el8_6.x86_64.rpm  
pam_ssh_agent_auth-debuginfo-0.10.3-7.15.el8_6.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and  
details on how to verify the signature are available from  
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2023-38408  
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIcBAEBCAAGBQJkyWl1AAoJENzjgjWX9erEcU0P/RQAp6tLg4iMPX8CMCPDI73o  
1bWh+LTdbJedsrzDywniRiuest4L1H0vDzrRc8xtU9pYsIg/ZhqXZH1dYkjS59YI  
Zk4IHFIWEcBr0g8AbknjAXeba/ASbjYz4Ng1FqAsCLSe8rG6viE/0+OXlDURw52O  
5gkxSh8JaOD+RgsjMypo7GAR47TGbPmwc3akvcg3o6kWMdnFR1MN/cQVHLNLuiem  
RBNbxO/KJty/6UNWf+lz+ikhNaCc1HS+6OCUA9l79a92NQqUyU26I4b7NwFdEnfv  
jkfZ/vPwVypvgo+17ajVLwg1S9lnk5sFmCEQYLmoYNclvpctf7gH5hTDUUdpO5Vc  
2p5ZjbSymap084hXB8t7ess1jOZ0D8WYuCW3jyAjWvFgEOsTgN84KVYfimgoVmij  
kS/pWQrYwrkzB4AtoxOc6KC3vSTrTqTat6IyyK01YOQrxedfb0o0G0xw/wmXTqpc  
MFF3OcAgXQ1ZQUSdIJKBwD0/2e+Gqi0ZkQ9ISMxd+76bK+tVkbTALLrULt6pOrtd  
gJ44C4762hHlJ8bjaFgErN8WsiJY0cpjP64rvPbzLZjHypAY6ZFyhDuNXLdFxLff  
F5519WI0HPJ9HBf1+ZtHW7LYAdAGScuAoVUaaVPzd9m1ry6q448k8kIF891zWRYN  
wcgAsTh2fo0DuorLrcpB  
=MjE7  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Tag

#ssh