Red Hat Security AdvisoryRHSA-2019:0482
cockpit security update
Released 2019-03-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) cockpit-173.2-1.el7, cockpit-bridge-173.2-1.el7, cockpit-system-173.2-1.el7 +1
- Red Hat Enterprise Linux Client Optional (v. 7) cockpit-doc-173.2-1.el7, cockpit-machines-ovirt-173.2-1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) cockpit-173.2-1.el7, cockpit-bridge-173.2-1.el7, cockpit-system-173.2-1.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) cockpit-doc-173.2-1.el7, cockpit-machines-ovirt-173.2-1.el7
- Red Hat Enterprise Linux Server (v. 7) cockpit-173.2-1.el7, cockpit-bridge-173.2-1.el7, cockpit-system-173.2-1.el7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) cockpit-doc-173.2-1.el7, cockpit-machines-ovirt-173.2-1.el7
- Red Hat Enterprise Linux Workstation (v. 7) cockpit-173.2-1.el7, cockpit-bridge-173.2-1.el7, cockpit-system-173.2-1.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) cockpit-doc-173.2-1.el7, cockpit-machines-ovirt-173.2-1.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) cockpit-173.2-1.el7, cockpit-bridge-173.2-1.el7, cockpit-system-173.2-1.el7 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) cockpit-doc-173.2-1.el7, cockpit-machines-ovirt-173.2-1.el7
Fixes 1 record
Priority MEDIUM 41
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04858 · Published 2019-03-26 · Fixed CWE-909
