import UBI cockpit-311.2-1.el9_4

.cockpit.metadata

@@ -1 +1 @@
-42f3ca8e775730b67855297e4477915fb1f3930b SOURCES/cockpit-311.1.tar.xz
+e4db91830e687a63851668cd2525132086ebae6d SOURCES/cockpit-311.2.tar.xz

.gitignore

@@ -1 +1 @@
-SOURCES/cockpit-311.1.tar.xz
+SOURCES/cockpit-311.2.tar.xz

SPECS/cockpit.spec

@@ -49,7 +49,7 @@ Summary:        Web Console for Linux servers
 License:        LGPL-2.1-or-later
 URL:            https://cockpit-project.org/
 
-Version:        311.1
+Version:        311.2
 Release:        1%{?dist}
 Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz
 
@@ -696,6 +696,10 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Tue Apr 02 2024 Martin Pitt <mpitt@redhat.com> - 311.2-1
+- sosreport: Fix command injection with crafted report names [CVE-2024-2947]
+  (jira#RHEL-31074)
+
 * Tue Feb 20 2024 Packit <hello@packit.dev> - 311.1-1
 - Update documentation links to RHEL 9 (RHEL-3954)
 - Storage: Various bug fixes