I notice that cockpit-selinux, cockpit-packagekit, and cockpit-tests were not included in this update. Will those packages be rebuilt so that they stay in sync?



Thanks,

-- Andy



-----Original Message-----

From: [log in to unmask] <[log in to unmask]> On Behalf Of Farhan Ahmed

Sent: Wednesday, March 13, 2019 12:38 PM

To: [log in to unmask]

Subject: EXT: Security ERRATA Moderate: cockpit on SL7.x x86_64



Synopsis: Moderate: cockpit security update

Advisory ID:       SLSA-2019:0482-1

Issue Date:        2019-03-13

CVE Numbers:       CVE-2019-3804

--



Security Fix(es):



* cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)

--



SL7

  x86_64

    cockpit-173.2-1.el7.x86_64.rpm

    cockpit-bridge-173.2-1.el7.x86_64.rpm

    cockpit-debuginfo-173.2-1.el7.i686.rpm

    cockpit-debuginfo-173.2-1.el7.x86_64.rpm

    cockpit-ws-173.2-1.el7.i686.rpm

    cockpit-ws-173.2-1.el7.x86_64.rpm

    cockpit-doc-173.2-1.el7.x86_64.rpm

    cockpit-173.2-1.el7.src.rpm

  noarch

    cockpit-system-173.2-1.el7.noarch.rpm

    cockpit-machines-ovirt-173.2-1.el7.noarch.rpm



- Scientific Linux Development Team