Lucene search
OracleLinuxELSA-2024-3843HistoryJun 11, 2024 - 12:00 a.m.
cockpit security update
2024-06-1100:00:00
linux.oracle.com
3
cockpit
security update
upstream urls
documentation links
subscription-manager-cockpit
spec file
sosreport
command injection fixed
7.3 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
[311.2-1.0.1]
- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 34030494]
- Update documentation links [Orabug: 30271413], [Orabug: 32013095],
[Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876] - Update spec file for new release
[311.2] - Remove recommends on subscription-manager-cockpit if applicable
[311.2-1] - sosreport: Fix command injection with crafted report names [CVE-2024-2947]
(jira#RHEL-31074)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | cockpit | < 311.2-1.0.1.el9_4 | cockpit-311.2-1.0.1.el9_4.src.rpm |
| oracle linux | 9 | src | cockpit | < 311.2-1.0.1.el9_4 | cockpit-311.2-1.0.1.el9_4.src.rpm |
| oracle linux | 9 | src | cockpit | < 311.2-1.0.1.el9_4 | cockpit-311.2-1.0.1.el9_4.src.rpm |
| oracle linux | 9 | aarch64 | cockpit | < 311.2-1.0.1.el9_4 | cockpit-311.2-1.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | cockpit | < 311.2-1.0.1.el9_4 | cockpit-311.2-1.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | cockpit-bridge | < 311.2-1.0.1.el9_4 | cockpit-bridge-311.2-1.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | cockpit-bridge | < 311.2-1.0.1.el9_4 | cockpit-bridge-311.2-1.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | noarch | cockpit-doc | < 311.2-1.0.1.el9_4 | cockpit-doc-311.2-1.0.1.el9_4.noarch.rpm |
| oracle linux | 9 | noarch | cockpit-doc | < 311.2-1.0.1.el9_4 | cockpit-doc-311.2-1.0.1.el9_4.noarch.rpm |
| oracle linux | 9 | noarch | cockpit-packagekit | < 311.2-1.0.1.el9_4 | cockpit-packagekit-311.2-1.0.1.el9_4.noarch.rpm |
Related
nessus
nessus
AlmaLinux 8 : cockpit (ALSA-2024:3667)
2024-06-06 00:00:00
Fedora 39 : cockpit (2024-6065341780)
2024-03-30 00:00:00
Oracle Linux 9 : cockpit (ELSA-2024-3843)
2024-06-12 00:00:00
osv
osv
cockpit - security update
2024-04-04 00:00:00
Moderate: cockpit security update
2024-06-14 13:59:16
Moderate: cockpit security update
2024-06-06 00:00:00
openvas
openvas
Fedora: Security Advisory for cockpit (FEDORA-2024-6065341780)
2024-04-03 00:00:00
Fedora: Security Advisory for cockpit (FEDORA-2024-4e95f130fc)
2024-04-03 00:00:00
Fedora: Security Advisory for cockpit (FEDORA-2024-31e83b461d)
2024-05-27 00:00:00
almalinux
almalinux
Moderate: cockpit security update
2024-06-11 00:00:00
Moderate: cockpit security update
2024-06-06 00:00:00
ubuntucve
ubuntucve
CVE-2024-2947
2024-03-28 00:00:00
debiancve
debiancve
CVE-2024-2947
2024-03-28 19:15:48
oraclelinux
oraclelinux
cockpit security update
2024-06-06 00:00:00
debian
debian
[SECURITY] [DSA 5655-1] cockpit security update
2024-04-04 18:58:35
veracode
veracode
Command Injection
2024-04-04 10:52:12
fedora
fedora
[SECURITY] Fedora 40 Update: cockpit-314-1.fc40
2024-03-31 00:20:39
[SECURITY] Fedora 39 Update: cockpit-314-1.fc39
2024-03-30 01:11:05
[SECURITY] Fedora 38 Update: cockpit-311.2-1.fc38
2024-04-18 01:14:43
cve
cve
CVE-2024-2947
2024-03-28 19:15:48
nvd
nvd
CVE-2024-2947
2024-03-28 19:15:48
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-2947
2024-03-27 13:51:46
7.3 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Related for ELSA-2024-3843