Red Hat Security Advisory

RHSA-2023:4889

DevWorkspace Operator 0.22 release

Released 2023-08-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Devworkspace 1.0 for RHEL 8 devworkspace/devworkspace-operator-bundle, devworkspace/devworkspace-project-clone-rhel8, devworkspace/devworkspace-rhel8-operator

Fixes 1 record

TI-2023-19792 CVE-2023-38408 · GHSA-px36-p9hv-7h2v

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently…

CRITICAL 89

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.797 Published 2023-07-20 Fixed CWE-428