ELSA-2024-3843

ELSA-2024-3843 - cockpit security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-06-11

Description

[311.2-1.0.1]
- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 34030494]
- Update documentation links [Orabug: 30271413], [Orabug: 32013095],
[Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
- Update spec file for new release

[311.2]
- Remove recommends on subscription-manager-cockpit if applicable

[311.2-1]
- sosreport: Fix command injection with crafted report names [CVE-2024-2947]
(jira#RHEL-31074)

Related CVEs

CVE-2024-2947

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	cockpit-311.2-1.0.1.el9_4.src.rpm	21ed5226e3012328a1cdff5271cdc3993e1762c9ece0dbc25cf90f7e2cd590d9	-	ol9_aarch64_appstream
	cockpit-311.2-1.0.1.el9_4.src.rpm	21ed5226e3012328a1cdff5271cdc3993e1762c9ece0dbc25cf90f7e2cd590d9	-	ol9_aarch64_baseos_latest
	cockpit-311.2-1.0.1.el9_4.src.rpm	21ed5226e3012328a1cdff5271cdc3993e1762c9ece0dbc25cf90f7e2cd590d9	-	ol9_aarch64_u4_baseos_patch
	cockpit-311.2-1.0.1.el9_4.aarch64.rpm	898d3d039e2a7ffb7d3a147eb31c3cac84e6a2dc286fa4f9190cfacec9a4cecc	-	ol9_aarch64_baseos_latest
	cockpit-311.2-1.0.1.el9_4.aarch64.rpm	898d3d039e2a7ffb7d3a147eb31c3cac84e6a2dc286fa4f9190cfacec9a4cecc	-	ol9_aarch64_u4_baseos_patch
	cockpit-bridge-311.2-1.0.1.el9_4.aarch64.rpm	ca0ff2fdada8c19b2ce99b3581db677533b7606f555dbc4c68650e6d0cd58b19	-	ol9_aarch64_baseos_latest
	cockpit-bridge-311.2-1.0.1.el9_4.aarch64.rpm	ca0ff2fdada8c19b2ce99b3581db677533b7606f555dbc4c68650e6d0cd58b19	-	ol9_aarch64_u4_baseos_patch
	cockpit-doc-311.2-1.0.1.el9_4.noarch.rpm	beadd276476ddc33baee0a51eae26a9f1107f010e76873ba010faa1528563f9c	-	ol9_aarch64_baseos_latest
	cockpit-doc-311.2-1.0.1.el9_4.noarch.rpm	beadd276476ddc33baee0a51eae26a9f1107f010e76873ba010faa1528563f9c	-	ol9_aarch64_u4_baseos_patch
	cockpit-packagekit-311.2-1.0.1.el9_4.noarch.rpm	abcdd29e00cbb580bf9cfec4b5e2cbf8ac91c1938c00722ce0d7c829cef9a0c9	-	ol9_aarch64_appstream
	cockpit-pcp-311.2-1.0.1.el9_4.aarch64.rpm	9b6c4eea778736c845b67829c77ea1f459764f83d59241217bef750ca5f5459c	-	ol9_aarch64_appstream
	cockpit-storaged-311.2-1.0.1.el9_4.noarch.rpm	dcb7e0173ab1d89af7430bbfc831e358caed50837c9f4a0eb3dc1177197d647d	-	ol9_aarch64_appstream
	cockpit-system-311.2-1.0.1.el9_4.noarch.rpm	e5f8d1b0aae62f4db9875012032212c10c254b72cf7bf2b86cb837967f3696f9	-	ol9_aarch64_baseos_latest
	cockpit-system-311.2-1.0.1.el9_4.noarch.rpm	e5f8d1b0aae62f4db9875012032212c10c254b72cf7bf2b86cb837967f3696f9	-	ol9_aarch64_u4_baseos_patch
	cockpit-ws-311.2-1.0.1.el9_4.aarch64.rpm	915bcb46c51b55acb91b310d4304120aaf96aaacb6d29bfac729a16cb3a4c98e	-	ol9_aarch64_baseos_latest
	cockpit-ws-311.2-1.0.1.el9_4.aarch64.rpm	915bcb46c51b55acb91b310d4304120aaf96aaacb6d29bfac729a16cb3a4c98e	-	ol9_aarch64_u4_baseos_patch
Oracle Linux 9 (x86_64)	cockpit-311.2-1.0.1.el9_4.src.rpm	21ed5226e3012328a1cdff5271cdc3993e1762c9ece0dbc25cf90f7e2cd590d9	-	ol9_x86_64_appstream
	cockpit-311.2-1.0.1.el9_4.src.rpm	21ed5226e3012328a1cdff5271cdc3993e1762c9ece0dbc25cf90f7e2cd590d9	-	ol9_x86_64_baseos_latest
	cockpit-311.2-1.0.1.el9_4.src.rpm	21ed5226e3012328a1cdff5271cdc3993e1762c9ece0dbc25cf90f7e2cd590d9	-	ol9_x86_64_u4_baseos_patch
	cockpit-311.2-1.0.1.el9_4.x86_64.rpm	4d007e76fd1e5e51a26bd2d143c2bb70557b8b6abd20263bd772916ed824861c	-	ol9_x86_64_baseos_latest
	cockpit-311.2-1.0.1.el9_4.x86_64.rpm	4d007e76fd1e5e51a26bd2d143c2bb70557b8b6abd20263bd772916ed824861c	-	ol9_x86_64_u4_baseos_patch
	cockpit-bridge-311.2-1.0.1.el9_4.x86_64.rpm	3a6a62a38c8ed4811b8b11ccb410d1255121a4c0807d0271560907b1d4d2c4fe	-	ol9_x86_64_baseos_latest
	cockpit-bridge-311.2-1.0.1.el9_4.x86_64.rpm	3a6a62a38c8ed4811b8b11ccb410d1255121a4c0807d0271560907b1d4d2c4fe	-	ol9_x86_64_u4_baseos_patch
	cockpit-doc-311.2-1.0.1.el9_4.noarch.rpm	beadd276476ddc33baee0a51eae26a9f1107f010e76873ba010faa1528563f9c	-	ol9_x86_64_baseos_latest
	cockpit-doc-311.2-1.0.1.el9_4.noarch.rpm	beadd276476ddc33baee0a51eae26a9f1107f010e76873ba010faa1528563f9c	-	ol9_x86_64_u4_baseos_patch
	cockpit-packagekit-311.2-1.0.1.el9_4.noarch.rpm	abcdd29e00cbb580bf9cfec4b5e2cbf8ac91c1938c00722ce0d7c829cef9a0c9	-	ol9_x86_64_appstream
	cockpit-pcp-311.2-1.0.1.el9_4.x86_64.rpm	832a7c138422e53d30e9016f2144ceda36dd4ea18f13517c373cdb7fbd13b908	-	ol9_x86_64_appstream
	cockpit-storaged-311.2-1.0.1.el9_4.noarch.rpm	dcb7e0173ab1d89af7430bbfc831e358caed50837c9f4a0eb3dc1177197d647d	-	ol9_x86_64_appstream
	cockpit-system-311.2-1.0.1.el9_4.noarch.rpm	e5f8d1b0aae62f4db9875012032212c10c254b72cf7bf2b86cb837967f3696f9	-	ol9_x86_64_baseos_latest
	cockpit-system-311.2-1.0.1.el9_4.noarch.rpm	e5f8d1b0aae62f4db9875012032212c10c254b72cf7bf2b86cb837967f3696f9	-	ol9_x86_64_u4_baseos_patch
	cockpit-ws-311.2-1.0.1.el9_4.x86_64.rpm	d990ec6dbdd1c1008c8e21dc5143cb699af25da76db73c10efab312408ea2490	-	ol9_x86_64_baseos_latest
	cockpit-ws-311.2-1.0.1.el9_4.x86_64.rpm	d990ec6dbdd1c1008c8e21dc5143cb699af25da76db73c10efab312408ea2490	-	ol9_x86_64_u4_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team