ELSA-2022-2008

ELSA-2022-2008 - cockpit security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2022-05-17

Description

[264.1-1.0.1]
- Remove duplicate reference to server in cockpit [Orabug: 33862832]
- Update documentation links [Orabug: 32795691]
- Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
- Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]

[264.1-1]
- metrics: Fix link construction for user services
- Translation updates (rhbz#2016998)

[264-1]
- Metrics: Improve layout on small resolutions
- Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
- Services: Show error message instead of eternal 'Loading...' state
- Accounts: Add override button to confirm weak password
- Accounts: Fix parsing of 'last login' date

[263-1]
- Overview: Show scheduled shutdowns
- Networking: Add firewall service description
- Shell: Fix browser history

[261-1]
- shell: Allow adding keys with passphrase

[260-1]
- Certificate login validation (rhbz#1992620, CVE-2021-3698)
- Client: Show previously used hosts
- Client: Support port specification
- bridge: Warning on missing cockpit-system package

[259-1]
- Translation updates

[258-1]
- Tweak login screen UI
- Fix SELinux policy installation

[257-1]
- Support for reading TLS certificates with any permissions
- cockpit-ws no longer supports merged certificates
- Services: Show user-owned systemd units (rhbz#1792270)

[255-1]
- Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
- kdump: Show 'Directory' field for NFS mounts (rbhz#2004041)

Related CVEs

CVE-2021-3660

CVE-2021-3698

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	cockpit-264.1-1.0.1.el8.src.rpm	8ad1a1294cf15ac5da9d6872b8b1a8b147e63650de3a31ba27e8e14ebd8b0414	-	ol8_aarch64_baseos_latest
	cockpit-264.1-1.0.1.el8.src.rpm	8ad1a1294cf15ac5da9d6872b8b1a8b147e63650de3a31ba27e8e14ebd8b0414	-	ol8_aarch64_u6_baseos_base
	cockpit-264.1-1.0.1.el8.aarch64.rpm	a4524d4b33818836f79577286d0d6ae03cd5d59608b74bf0dd28d70d1a99c295	-	ol8_aarch64_baseos_latest
	cockpit-264.1-1.0.1.el8.aarch64.rpm	a4524d4b33818836f79577286d0d6ae03cd5d59608b74bf0dd28d70d1a99c295	-	ol8_aarch64_u6_baseos_base
	cockpit-bridge-264.1-1.0.1.el8.aarch64.rpm	c962c5737c01973cfc5499ecaf243b7a1ef9b51d95aa87f8e72cb3103a820672	-	ol8_aarch64_baseos_latest
	cockpit-bridge-264.1-1.0.1.el8.aarch64.rpm	c962c5737c01973cfc5499ecaf243b7a1ef9b51d95aa87f8e72cb3103a820672	-	ol8_aarch64_u6_baseos_base
	cockpit-doc-264.1-1.0.1.el8.noarch.rpm	3f6f7e67aba16bb92db5e8f3e5e6ed221248b1cee554a9149480c308091df3a2	-	ol8_aarch64_baseos_latest
	cockpit-doc-264.1-1.0.1.el8.noarch.rpm	3f6f7e67aba16bb92db5e8f3e5e6ed221248b1cee554a9149480c308091df3a2	-	ol8_aarch64_u6_baseos_base
	cockpit-system-264.1-1.0.1.el8.noarch.rpm	f3b304465313a6a03b95eb6ced62a87c8f1ce2aef616beb2d966fe467043db2b	-	ol8_aarch64_baseos_latest
	cockpit-system-264.1-1.0.1.el8.noarch.rpm	f3b304465313a6a03b95eb6ced62a87c8f1ce2aef616beb2d966fe467043db2b	-	ol8_aarch64_u6_baseos_base
	cockpit-ws-264.1-1.0.1.el8.aarch64.rpm	5cc97465fba07103ef6722e7b42ec2b1d5d8eb2c36f6cd467cd8f7f0b8f191d1	-	ol8_aarch64_baseos_latest
	cockpit-ws-264.1-1.0.1.el8.aarch64.rpm	5cc97465fba07103ef6722e7b42ec2b1d5d8eb2c36f6cd467cd8f7f0b8f191d1	-	ol8_aarch64_u6_baseos_base
Oracle Linux 8 (x86_64)	cockpit-264.1-1.0.1.el8.src.rpm	8ad1a1294cf15ac5da9d6872b8b1a8b147e63650de3a31ba27e8e14ebd8b0414	-	ol8_x86_64_baseos_latest
	cockpit-264.1-1.0.1.el8.src.rpm	8ad1a1294cf15ac5da9d6872b8b1a8b147e63650de3a31ba27e8e14ebd8b0414	-	ol8_x86_64_u6_baseos_base
	cockpit-264.1-1.0.1.el8.x86_64.rpm	bf2b95991c0bcf7b639d1e65c4e5745219baf7c658877c65738dfb788c3f818c	-	ol8_x86_64_baseos_latest
	cockpit-264.1-1.0.1.el8.x86_64.rpm	bf2b95991c0bcf7b639d1e65c4e5745219baf7c658877c65738dfb788c3f818c	-	ol8_x86_64_u6_baseos_base
	cockpit-bridge-264.1-1.0.1.el8.x86_64.rpm	17dfc6303ec95579c3accdc00b55a5baa2b234aa6193e0f98765687dad3b7cca	-	ol8_x86_64_baseos_latest
	cockpit-bridge-264.1-1.0.1.el8.x86_64.rpm	17dfc6303ec95579c3accdc00b55a5baa2b234aa6193e0f98765687dad3b7cca	-	ol8_x86_64_u6_baseos_base
	cockpit-doc-264.1-1.0.1.el8.noarch.rpm	3f6f7e67aba16bb92db5e8f3e5e6ed221248b1cee554a9149480c308091df3a2	-	ol8_x86_64_baseos_latest
	cockpit-doc-264.1-1.0.1.el8.noarch.rpm	3f6f7e67aba16bb92db5e8f3e5e6ed221248b1cee554a9149480c308091df3a2	-	ol8_x86_64_u6_baseos_base
	cockpit-system-264.1-1.0.1.el8.noarch.rpm	f3b304465313a6a03b95eb6ced62a87c8f1ce2aef616beb2d966fe467043db2b	-	ol8_x86_64_baseos_latest
	cockpit-system-264.1-1.0.1.el8.noarch.rpm	f3b304465313a6a03b95eb6ced62a87c8f1ce2aef616beb2d966fe467043db2b	-	ol8_x86_64_u6_baseos_base
	cockpit-ws-264.1-1.0.1.el8.x86_64.rpm	ad07c2b906b46cf27ca5d8ee9daecc4e4f769cb0a2963fd63c6e04272542b051	-	ol8_x86_64_baseos_latest
	cockpit-ws-264.1-1.0.1.el8.x86_64.rpm	ad07c2b906b46cf27ca5d8ee9daecc4e4f769cb0a2963fd63c6e04272542b051	-	ol8_x86_64_u6_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team