Issued:

2018-11-28

Updated:

2018-11-28

RHBA-2018:3712 - cockpit bug fix update

Synopsis

cockpit bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Updated cockpit packages that fix two bugs are now available for Red Hat Enterprise Linux 7 Extras.

Description

Cockpit is a server administration interface that makes it easy to administer GNU/Linux servers through a web browser.

This update fixes two bugs, including this:

• The cockpit dashboard has been changed to present SHA256 fingerprints instead of MD5 fingerprints when connecting to remote machines through SSH. MD5 fingerprints are cryptographically weak now, and do not work with FIPS mode enabled. (BZ#1585191)

Users of cockpit are advised to upgrade to these updated packages, which fix these two bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• cockpit-pcp-176-4.el7.aarch64.rpm
• cockpit-machines-176-4.el7.s390x.rpm
• cockpit-dashboard-176-4.el7.aarch64.rpm
• cockpit-dashboard-176-4.el7.s390x.rpm
• cockpit-machines-176-4.el7.ppc64le.rpm
• libssh-0.7.1-7.el7.aarch64.rpm
• cockpit-docker-176-4.el7.ppc64le.rpm
• cockpit-packagekit-176-4.el7.ppc64le.rpm
• libssh-debuginfo-0.7.1-7.el7.aarch64.rpm
• cockpit-packagekit-176-4.el7.s390x.rpm
• libssh-debuginfo-0.7.1-7.el7.s390x.rpm
• libssh-devel-0.7.1-7.el7.ppc64le.rpm
• cockpit-machines-176-4.el7.aarch64.rpm
• cockpit-dashboard-176-4.el7.x86_64.rpm
• libssh-devel-0.7.1-7.el7.x86_64.rpm
• libssh-0.7.1-7.el7.x86_64.rpm
• cockpit-pcp-176-4.el7.s390x.rpm
• cockpit-machines-176-4.el7.x86_64.rpm
• libssh-0.7.1-7.el7.src.rpm
• cockpit-pcp-176-4.el7.ppc64le.rpm
• cockpit-docker-176-4.el7.x86_64.rpm
• cockpit-packagekit-176-4.el7.x86_64.rpm
• cockpit-packagekit-176-4.el7.aarch64.rpm
• cockpit-docker-176-4.el7.s390x.rpm
• libssh-debuginfo-0.7.1-7.el7.x86_64.rpm
• libssh-devel-0.7.1-7.el7.s390x.rpm
• cockpit-dashboard-176-4.el7.ppc64le.rpm
• cockpit-176-4.el7.src.rpm
• cockpit-pcp-176-4.el7.x86_64.rpm
• libssh-0.7.1-7.el7.ppc64le.rpm
• libssh-devel-0.7.1-7.el7.aarch64.rpm
• cockpit-storaged-176-4.el7.noarch.rpm
• libssh-0.7.1-7.el7.s390x.rpm
• libssh-debuginfo-0.7.1-7.el7.ppc64le.rpm
• cockpit-docker-176-4.el7.aarch64.rpm

Fixes

• This content is not included.BZ - 1585191
• This content is not included.BZ - 1637182

CVEs

• CVE-2018-10933

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.