Red Hat Product Errata RHBA-2018:3712 - Bug Fix Advisory
Issued:
2018-11-28
Updated:
2018-11-28

RHBA-2018:3712 - Bug Fix Advisory

Synopsis

cockpit bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated cockpit packages that fix two bugs are now available for Red Hat Enterprise Linux 7 Extras.

Description

Cockpit is a server administration interface that makes it easy to administer GNU/Linux servers through a web browser.

This update fixes two bugs, including this:

  • The cockpit dashboard has been changed to present SHA256 fingerprints instead of MD5 fingerprints when connecting to remote machines through SSH. MD5 fingerprints are cryptographically weak now, and do not work with FIPS mode enabled. (BZ#1585191)

Users of cockpit are advised to upgrade to these updated packages, which fix these two bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Fixes

  • BZ - 1585191 - Cockpit dashboard fails when run on a FIPS 140-2 compliant system.
  • BZ - 1637182 - SHA256 fingerprint support

References

(none)

Red Hat Enterprise Linux Server 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
x86_64
cockpit-dashboard-176-4.el7.x86_64.rpm SHA-256: fb0731d992d6a2f62112d43fbd9907d3739a8259b06b4a116401c79ea8716388
cockpit-docker-176-4.el7.x86_64.rpm SHA-256: 7533a6e5ae91704b2adb221513edaac9ad6629469d9195ad014bcc0b5edddce4
cockpit-machines-176-4.el7.x86_64.rpm SHA-256: 74b207eb2a5583acc5ca80c3971433e9789c4a27d818a7dabe3c2b20d961cfdb
cockpit-packagekit-176-4.el7.x86_64.rpm SHA-256: 0a03d50cf8c7accdd14a8bdab7e32cc3c5a8c201c33085715d7704f42159c9de
cockpit-pcp-176-4.el7.x86_64.rpm SHA-256: 4c1dcb62efdd8f9fae76204711e3ee9e79b08cc1cd854c3766c46ae46fd1cbaa
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.x86_64.rpm SHA-256: 2187e2ba8764b31a55995c529a1f9813d3df7fdbd004e20717e62ddf4dd8f1f3
libssh-debuginfo-0.7.1-7.el7.x86_64.rpm SHA-256: 7dcf3ed0737ab67a0b964efbcdfc533434e5928e0e800a9fff6edf918c1989db
libssh-devel-0.7.1-7.el7.x86_64.rpm SHA-256: 2e3b4087a9a7c3db6227409d67e715bc95af94bf98ccccfc71fc73488a0eec5e

Red Hat Enterprise Linux Workstation 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
x86_64
cockpit-dashboard-176-4.el7.x86_64.rpm SHA-256: fb0731d992d6a2f62112d43fbd9907d3739a8259b06b4a116401c79ea8716388
cockpit-machines-176-4.el7.x86_64.rpm SHA-256: 74b207eb2a5583acc5ca80c3971433e9789c4a27d818a7dabe3c2b20d961cfdb
cockpit-packagekit-176-4.el7.x86_64.rpm SHA-256: 0a03d50cf8c7accdd14a8bdab7e32cc3c5a8c201c33085715d7704f42159c9de
cockpit-pcp-176-4.el7.x86_64.rpm SHA-256: 4c1dcb62efdd8f9fae76204711e3ee9e79b08cc1cd854c3766c46ae46fd1cbaa
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.x86_64.rpm SHA-256: 2187e2ba8764b31a55995c529a1f9813d3df7fdbd004e20717e62ddf4dd8f1f3
libssh-debuginfo-0.7.1-7.el7.x86_64.rpm SHA-256: 7dcf3ed0737ab67a0b964efbcdfc533434e5928e0e800a9fff6edf918c1989db

Red Hat Enterprise Linux Desktop 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
x86_64
cockpit-dashboard-176-4.el7.x86_64.rpm SHA-256: fb0731d992d6a2f62112d43fbd9907d3739a8259b06b4a116401c79ea8716388
cockpit-machines-176-4.el7.x86_64.rpm SHA-256: 74b207eb2a5583acc5ca80c3971433e9789c4a27d818a7dabe3c2b20d961cfdb
cockpit-packagekit-176-4.el7.x86_64.rpm SHA-256: 0a03d50cf8c7accdd14a8bdab7e32cc3c5a8c201c33085715d7704f42159c9de
cockpit-pcp-176-4.el7.x86_64.rpm SHA-256: 4c1dcb62efdd8f9fae76204711e3ee9e79b08cc1cd854c3766c46ae46fd1cbaa
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.x86_64.rpm SHA-256: 2187e2ba8764b31a55995c529a1f9813d3df7fdbd004e20717e62ddf4dd8f1f3
libssh-debuginfo-0.7.1-7.el7.x86_64.rpm SHA-256: 7dcf3ed0737ab67a0b964efbcdfc533434e5928e0e800a9fff6edf918c1989db

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
s390x
cockpit-dashboard-176-4.el7.s390x.rpm SHA-256: 4f4a732f4d723f8fcdfa7e2c6d7621fdcf7744789341d1073c26258f31b8a5e7
cockpit-docker-176-4.el7.s390x.rpm SHA-256: 7b705f7b9d7857384ab9cdf6cb1c30a9e85d75ace1c1e89a0f1214ce5b12f9ee
cockpit-machines-176-4.el7.s390x.rpm SHA-256: c990fa08982d7893e94957b988c7cf15b4110608fa8942f5c6bedb69bb8ea0d7
cockpit-packagekit-176-4.el7.s390x.rpm SHA-256: d80a25b8a62e113020b168d759e3a82987499338ec8408237659807d91a6b75f
cockpit-pcp-176-4.el7.s390x.rpm SHA-256: d74f04058895db4da5abf06e046c7aa8e9ef4b5db27211f67993eb5c8d263a83
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.s390x.rpm SHA-256: 08e3207d0a59a577dde391d76e77fc326c0775acb19423bfdbc5efa4384feafe
libssh-debuginfo-0.7.1-7.el7.s390x.rpm SHA-256: eff1e2be9e769cf69a171e625aa3b5bee425244e193480246b6d2f91e37d4f62
libssh-devel-0.7.1-7.el7.s390x.rpm SHA-256: 1d20698b7ac733dd5dcb29e0eed578bbd4af3f9c6c832fb2effc5261bd74452a

Red Hat Enterprise Linux for Power, little endian 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
ppc64le
cockpit-dashboard-176-4.el7.ppc64le.rpm SHA-256: 3ff72888aa0ab639b5bed9957e7c989897e6cc2ff0879c7678e37465e79495c2
cockpit-docker-176-4.el7.ppc64le.rpm SHA-256: ce92604224dc6c697be4aff9adbd0d8195d07fb4bc26270006f1e00da035c409
cockpit-machines-176-4.el7.ppc64le.rpm SHA-256: 5c66c870bc1ce87c05c421978a6c595c380e1736022c352075a5210c4ab6d6a2
cockpit-packagekit-176-4.el7.ppc64le.rpm SHA-256: 3b1bb0e9815de2599d116467a09f84067eb67e09971ca4a082730d8e4205bd20
cockpit-pcp-176-4.el7.ppc64le.rpm SHA-256: 71e4e9444339ad712c64a1161a841a888a313f78ef0f9a552d77f5538e863f31
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.ppc64le.rpm SHA-256: 9cca73fde142c96d9653638ba3992b77c50bc002c89592d2fc608080fe9e9f53
libssh-debuginfo-0.7.1-7.el7.ppc64le.rpm SHA-256: ad1357be242a642145efe092c7291360701cc7c4cd07c95782e9639c79a84e88
libssh-devel-0.7.1-7.el7.ppc64le.rpm SHA-256: 37c0e11392492fc63bec0890c5c1264652bbb605893aa502ea9f31b3c3d08e11

Red Hat Enterprise Linux for ARM 64 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
aarch64
cockpit-dashboard-176-4.el7.aarch64.rpm SHA-256: b3cfb982baa34b498b7336876ebfd9a4ff08a9cabfb179b774296a15815d7d12
cockpit-docker-176-4.el7.aarch64.rpm SHA-256: 9346827f54add83ced5813634268f0bab15992990fecc8efa96dbdb3fbe7e21c
cockpit-machines-176-4.el7.aarch64.rpm SHA-256: 04eb43ef16dbb816a2d7dc35aa604e3f0181da0e9cf922ec56365ee17a2b2613
cockpit-packagekit-176-4.el7.aarch64.rpm SHA-256: 1c1114376237c53bcc22f171c6498cc112e7bceaa904878488340791ff1366ea
cockpit-pcp-176-4.el7.aarch64.rpm SHA-256: 8097e4bbba9ec7adb71b4339ab102b5e8f659f0d061e921611a9dca15f247daa
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.aarch64.rpm SHA-256: 72938dae9c5e1b1fa2bc7cc5a26be9b5a2eafdd076d6a5cfea3801adee71e506
libssh-debuginfo-0.7.1-7.el7.aarch64.rpm SHA-256: 995371123f4c4a12a7a076856ea63a9b2d5ef3bebe03c2363645743163607e6b
libssh-devel-0.7.1-7.el7.aarch64.rpm SHA-256: 76657a1895d5e63250d9933bc53165d9951d5060f09cd6fe4f38888d215dc65b

Red Hat Enterprise Linux for Power 9 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
ppc64le
cockpit-dashboard-176-4.el7.ppc64le.rpm SHA-256: 3ff72888aa0ab639b5bed9957e7c989897e6cc2ff0879c7678e37465e79495c2
cockpit-docker-176-4.el7.ppc64le.rpm SHA-256: ce92604224dc6c697be4aff9adbd0d8195d07fb4bc26270006f1e00da035c409
cockpit-machines-176-4.el7.ppc64le.rpm SHA-256: 5c66c870bc1ce87c05c421978a6c595c380e1736022c352075a5210c4ab6d6a2
cockpit-packagekit-176-4.el7.ppc64le.rpm SHA-256: 3b1bb0e9815de2599d116467a09f84067eb67e09971ca4a082730d8e4205bd20
cockpit-pcp-176-4.el7.ppc64le.rpm SHA-256: 71e4e9444339ad712c64a1161a841a888a313f78ef0f9a552d77f5538e863f31
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.ppc64le.rpm SHA-256: 9cca73fde142c96d9653638ba3992b77c50bc002c89592d2fc608080fe9e9f53
libssh-debuginfo-0.7.1-7.el7.ppc64le.rpm SHA-256: ad1357be242a642145efe092c7291360701cc7c4cd07c95782e9639c79a84e88
libssh-devel-0.7.1-7.el7.ppc64le.rpm SHA-256: 37c0e11392492fc63bec0890c5c1264652bbb605893aa502ea9f31b3c3d08e11

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
cockpit-176-4.el7.src.rpm SHA-256: 0429e9bee0053605322bd96381e2259ef79a2ea2992c4d8a091484325a496e2f
libssh-0.7.1-7.el7.src.rpm SHA-256: 7cc618e671ff4e8a9ddf9bae3a0b30a11ff68ec8b3c9a0369458fc62c21ebe63
s390x
cockpit-dashboard-176-4.el7.s390x.rpm SHA-256: 4f4a732f4d723f8fcdfa7e2c6d7621fdcf7744789341d1073c26258f31b8a5e7
cockpit-docker-176-4.el7.s390x.rpm SHA-256: 7b705f7b9d7857384ab9cdf6cb1c30a9e85d75ace1c1e89a0f1214ce5b12f9ee
cockpit-machines-176-4.el7.s390x.rpm SHA-256: c990fa08982d7893e94957b988c7cf15b4110608fa8942f5c6bedb69bb8ea0d7
cockpit-packagekit-176-4.el7.s390x.rpm SHA-256: d80a25b8a62e113020b168d759e3a82987499338ec8408237659807d91a6b75f
cockpit-pcp-176-4.el7.s390x.rpm SHA-256: d74f04058895db4da5abf06e046c7aa8e9ef4b5db27211f67993eb5c8d263a83
cockpit-storaged-176-4.el7.noarch.rpm SHA-256: 114f8c0b23ed5d92a8d204abb87e9f8d85dca852fca970499c1ade5843660006
libssh-0.7.1-7.el7.s390x.rpm SHA-256: 08e3207d0a59a577dde391d76e77fc326c0775acb19423bfdbc5efa4384feafe
libssh-debuginfo-0.7.1-7.el7.s390x.rpm SHA-256: eff1e2be9e769cf69a171e625aa3b5bee425244e193480246b6d2f91e37d4f62
libssh-devel-0.7.1-7.el7.s390x.rpm SHA-256: 1d20698b7ac733dd5dcb29e0eed578bbd4af3f9c6c832fb2effc5261bd74452a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.