Packages / openSUSE Tumbleweed / Unspecified / cockpit-repos

Package: cockpit-repos (4.9-1.1)

A Cockpit module for managing system repositories

Other Packages Related to cockpit-repos:

dep: [cockpit-bridge]
Cockpit bridge server-side component

Download cockpit-repos

Architecture	Package size	Installed size	Files	Package
noarch	383 KiB	3.7 MiB	list of files	Download

Package file paths (34)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/share/cockpit
/usr/share/cockpit/cockpit-repos
/usr/share/cockpit/cockpit-repos/index.css
/usr/share/cockpit/cockpit-repos/index.html
/usr/share/cockpit/cockpit-repos/index.js
/usr/share/cockpit/cockpit-repos/index.js.LEGAL.txt
/usr/share/cockpit/cockpit-repos/manifest.json
/usr/share/cockpit/cockpit-repos/po.de.js
/usr/share/cockpit/cockpit-repos/po.es.js
/usr/share/cockpit/cockpit-repos/po.fr.js
/usr/share/cockpit/cockpit-repos/po.id.js
/usr/share/cockpit/cockpit-repos/po.it.js
/usr/share/cockpit/cockpit-repos/po.ja.js
/usr/share/cockpit/cockpit-repos/po.manifest.de.js
/usr/share/cockpit/cockpit-repos/po.manifest.es.js
/usr/share/cockpit/cockpit-repos/po.manifest.fr.js
/usr/share/cockpit/cockpit-repos/po.manifest.id.js
/usr/share/cockpit/cockpit-repos/po.manifest.it.js
/usr/share/cockpit/cockpit-repos/po.manifest.ja.js
/usr/share/cockpit/cockpit-repos/po.manifest.pt_BR.js
/usr/share/cockpit/cockpit-repos/po.manifest.sv.js
/usr/share/cockpit/cockpit-repos/po.manifest.uk.js
/usr/share/cockpit/cockpit-repos/po.manifest.zh_CN.js
/usr/share/cockpit/cockpit-repos/po.manifest.zh_TW.js
/usr/share/cockpit/cockpit-repos/po.pt_BR.js
/usr/share/cockpit/cockpit-repos/po.sv.js
/usr/share/cockpit/cockpit-repos/po.uk.js
/usr/share/cockpit/cockpit-repos/po.zh_CN.js
/usr/share/cockpit/cockpit-repos/po.zh_TW.js
/usr/share/doc/packages/cockpit-repos
/usr/share/doc/packages/cockpit-repos/README.md
/usr/share/licenses/cockpit-repos
/usr/share/licenses/cockpit-repos/LICENSE
/usr/share/metainfo/org.opensuse.cockpit_repos.metainfo.xml

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browser Build an image that includes cockpit-repos

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.9-1.1	tumbleweed / oss	noarch	openSUSE Tumbleweed · OSS · multi-architecture	383 KiB	3.7 MiB	noarch/cockpit-repos-4.9-1.1.noarch.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

Fixed and unaffected versions (4)

CVE	Severity	Version impact
[CVE-2026-27904] Published: Feb 26, 2026, 1:07:42 AM UTC minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extgl	High(7.5)	Fixed Details (1) `4.9-1.1` · noarch · tumbleweed Fixed · Fixed: `4.9-1.1` nvd · cockpit-repos · opensuse · tumbleweed
[CVE-2026-25547] Published: Feb 4, 2026, 9:51:17 PM UTC node-brace-expansion: CVE-2026-25547	High(7.5)	Fixed Details (1) `4.9-1.1` · noarch · tumbleweed Fixed · Fixed: `4.7-4.1` dsa · cockpit-repos · opensuse · tumbleweed
[CVE-2025-64718] Published: Nov 13, 2025, 3:32:44 PM UTC node-js-yaml: CVE-2025-64718	Medium(5.4)	Fixed Details (1) `4.9-1.1` · noarch · tumbleweed Fixed · Fixed: `4.6-1.1` dsa · cockpit-repos · opensuse · tumbleweed
[CVE-2025-13465] Published: Jan 1, 2025, 12:00:00 AM UTC Lodash vulnerabilities	High(8.2)	Fixed Details (1) `4.9-1.1` · noarch · tumbleweed Fixed · Fixed: `4.7-2.1` usn · cockpit-repos · opensuse · tumbleweed

Last synced: Oct 28, 2026, 2:52:26 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.9-1.1 / noarchObserved Sep 1, 2026sha512 9619a7e15b06…4fa22937Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 9619a7e15b065b047460ac7c374fd66aaed8ec76cfde757d3bd8c2331995f977daa4396aeeb26a88d694653da84ead82e77d3be54334e92c7dcbad3e4fa22937

Field source: openSUSE Tumbleweed OSS

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable