I believe that SL7 is currently in sync with what RH publishes. The
cockpit packages are a bit of a mess in what they produce and if they go
into extras, base, or neither....
Pat
On 9/3/19 2:17 PM, Peed, Andrew (GE Healthcare) wrote:
I notice that cockpit-selinux, cockpit-packagekit, and cockpit-tests were not
included in this update. Will those packages be rebuilt so that they stay in
sync?
Thanks,
-- Andy
-----Original Message-----
From: owner-scientific-linux-err...@listserv.fnal.gov
<owner-scientific-linux-err...@listserv.fnal.gov> On Behalf Of Farhan Ahmed
Sent: Wednesday, March 13, 2019 12:38 PM
To: scientific-linux-err...@listserv.fnal.gov
Subject: EXT: Security ERRATA Moderate: cockpit on SL7.x x86_64
Synopsis: Moderate: cockpit security update
Advisory ID: SLSA-2019:0482-1
Issue Date: 2019-03-13
CVE Numbers: CVE-2019-3804
--
Security Fix(es):
* cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)
--
SL7
x86_64
cockpit-173.2-1.el7.x86_64.rpm
cockpit-bridge-173.2-1.el7.x86_64.rpm
cockpit-debuginfo-173.2-1.el7.i686.rpm
cockpit-debuginfo-173.2-1.el7.x86_64.rpm
cockpit-ws-173.2-1.el7.i686.rpm
cockpit-ws-173.2-1.el7.x86_64.rpm
cockpit-doc-173.2-1.el7.x86_64.rpm
cockpit-173.2-1.el7.src.rpm
noarch
cockpit-system-173.2-1.el7.noarch.rpm
cockpit-machines-ovirt-173.2-1.el7.noarch.rpm
- Scientific Linux Development Team
--
Pat Riehecky
Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org
