Skip to content
OpenAdvisories
Medium ELSA-2022-2008 2 CVEs

Moderate: cockpit security, bug fix, and enhancement update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Summary

[264.1-1.0.1]
- Remove duplicate reference to server in cockpit [Orabug: 33862832]
- Update documentation links [Orabug: 32795691]
- Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
- Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]

[264.1-1]
- metrics: Fix link construction for user services
- Translation updates (rhbz#2016998)

[264-1]
- Metrics: Improve layout on small resolutions
- Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
- Services: Show error message instead of eternal 'Loading...' state
- Accounts: Add override button to confirm weak password
- Accounts: Fix parsing of 'last login' date

[263-1]
- Overview: Show scheduled shutdowns
- Networking: Add firewall service description
- Shell: Fix browser history

[261-1]
- shell: Allow adding keys with passphrase

[260-1]
- Certificate login validation (rhbz#1992620, CVE-2021-3698)
- Client: Show previously used hosts
- Client: Support port specification
- bridge: Warning on missing cockpit-system package

[259-1]
- Translation updates

[258-1]
- Tweak login screen UI
- Fix SELinux policy installation

[257-1]
- Support for reading TLS certificates with any permissions
- cockpit-ws no longer supports merged certificates
- Services: Show user-owned systemd units (rhbz#1792270)

[255-1]
- Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
- kdump: Show 'Directory' field for NFS mounts (rbhz#2004041)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 cockpit 0:264.1-1.0.1.el8
Oracle Linux · 8 cockpit-bridge 0:264.1-1.0.1.el8
Oracle Linux · 8 cockpit-doc 0:264.1-1.0.1.el8
Oracle Linux · 8 cockpit-system 0:264.1-1.0.1.el8
Oracle Linux · 8 cockpit-ws 0:264.1-1.0.1.el8

Vulnerabilities 2