I believe that SL7 is currently in sync with what RH publishes.  The 
cockpit packages are a bit of a mess in what they produce and if they go 
into extras, base, or neither....

Pat

On 9/3/19 2:17 PM, Peed, Andrew (GE Healthcare) wrote:
> I notice that cockpit-selinux, cockpit-packagekit, and cockpit-tests were not included in this update. Will those packages be rebuilt so that they stay in sync?
>
> Thanks,
> -- Andy
>
> -----Original Message-----
> From: [log in to unmask] <[log in to unmask]> On Behalf Of Farhan Ahmed
> Sent: Wednesday, March 13, 2019 12:38 PM
> To: [log in to unmask]
> Subject: EXT: Security ERRATA Moderate: cockpit on SL7.x x86_64
>
> Synopsis: Moderate: cockpit security update
> Advisory ID:       SLSA-2019:0482-1
> Issue Date:        2019-03-13
> CVE Numbers:       CVE-2019-3804
> --
>
> Security Fix(es):
>
> * cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)
> --
>
> SL7
>    x86_64
>      cockpit-173.2-1.el7.x86_64.rpm
>      cockpit-bridge-173.2-1.el7.x86_64.rpm
>      cockpit-debuginfo-173.2-1.el7.i686.rpm
>      cockpit-debuginfo-173.2-1.el7.x86_64.rpm
>      cockpit-ws-173.2-1.el7.i686.rpm
>      cockpit-ws-173.2-1.el7.x86_64.rpm
>      cockpit-doc-173.2-1.el7.x86_64.rpm
>      cockpit-173.2-1.el7.src.rpm
>    noarch
>      cockpit-system-173.2-1.el7.noarch.rpm
>      cockpit-machines-ovirt-173.2-1.el7.noarch.rpm
>
> - Scientific Linux Development Team

-- 
Pat Riehecky

Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org