ELSA-2022-2008

ELSA-2022-2008 - cockpit security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2022-05-17

Description

[264.1-1.0.1]
- Remove duplicate reference to server in cockpit [Orabug: 33862832]
- Update documentation links [Orabug: 32795691]
- Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
- Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]

[264.1-1]
- metrics: Fix link construction for user services
- Translation updates (rhbz#2016998)

[264-1]
- Metrics: Improve layout on small resolutions
- Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
- Services: Show error message instead of eternal 'Loading...' state
- Accounts: Add override button to confirm weak password
- Accounts: Fix parsing of 'last login' date

[263-1]
- Overview: Show scheduled shutdowns
- Networking: Add firewall service description
- Shell: Fix browser history

[261-1]
- shell: Allow adding keys with passphrase

[260-1]
- Certificate login validation (rhbz#1992620, CVE-2021-3698)
- Client: Show previously used hosts
- Client: Support port specification
- bridge: Warning on missing cockpit-system package

[259-1]
- Translation updates

[258-1]
- Tweak login screen UI
- Fix SELinux policy installation

[257-1]
- Support for reading TLS certificates with any permissions
- cockpit-ws no longer supports merged certificates
- Services: Show user-owned systemd units (rhbz#1792270)

[255-1]
- Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
- kdump: Show 'Directory' field for NFS mounts (rbhz#2004041)

Related CVEs

CVE-2021-3698

CVE-2021-3660

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	cockpit-264.1-1.0.1.el8.src.rpm	6b790e7099866cfcc8be9d69d30a902a	-
	cockpit-264.1-1.0.1.el8.aarch64.rpm	aa597a68f266f09650a26e6a2b25ed2b	-
	cockpit-bridge-264.1-1.0.1.el8.aarch64.rpm	6b745bcbea0b5505274055c5a64208b7	-
	cockpit-doc-264.1-1.0.1.el8.noarch.rpm	4c779d77de63f814ce40201e060514ce	-
	cockpit-system-264.1-1.0.1.el8.noarch.rpm	0d79d221bc534d8e531ff8b5911f604d	-
	cockpit-ws-264.1-1.0.1.el8.aarch64.rpm	9154388144f23417ca0d79d6adb1cc82	-
Oracle Linux 8 (x86_64)	cockpit-264.1-1.0.1.el8.src.rpm	6b790e7099866cfcc8be9d69d30a902a	-
	cockpit-264.1-1.0.1.el8.x86_64.rpm	6a4cb13edb13d74d9c6dce1a73848e0e	-
	cockpit-bridge-264.1-1.0.1.el8.x86_64.rpm	9ed734d17bf718ec4fa6336b032cdd24	-
	cockpit-doc-264.1-1.0.1.el8.noarch.rpm	4c779d77de63f814ce40201e060514ce	-
	cockpit-system-264.1-1.0.1.el8.noarch.rpm	0d79d221bc534d8e531ff8b5911f604d	-
	cockpit-ws-264.1-1.0.1.el8.x86_64.rpm	569b1865c4dd5465c9af04908b9b392b	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team