Jelle van der Waa

### Explain what happens 1. Add a host 2. Edit the host and change the username  ### Version of Cockpit 271 ### Where is the problem in Cockpit? _No...

On reverse proxy with an UrlRoot= the error page fails to load its fonts

2

### Explain what happens Similar to this commit 62c45a95c91dc1ecfbc235a248cb30aa68d262a3 these fonts should be loaded with a relative path but not absolute. ``` src/common/fail.html: src: url('/cockpit/static/fonts/RedHatDisplay-Medium.woff2') format('woff'); src/common/fail.html: src: url('/cockpit/static/fonts/OpenSans-Light-webfont.woff') format('woff');...

Before pushing new pixel tests verify if the current pixel test reference is not out of date. This is a bit tricky as we do not know how a user...

cockpit hardware information is wrong on a Raspberry Pi 3

12

### Explain what happens On my RPI 3 cockpit does not show the model   Device tree has the correct information: ``` [jelle@fedora ~]$ sudo cat /proc/device-tree/model Raspberry Pi...

Seen on production, needs investigation ``` Jul 03 10:43:07 security.archlinux.org make[15075]: Updating package cache... Jul 03 10:43:07 security.archlinux.org make[15075]: -> Querying alpm database...done Jul 03 10:43:07 security.archlinux.org make[15075]: -> Latest...

Implemented in [flask-taliskman](https://github.com/GoogleCloudPlatform/flask-talisman/commit/9827cf2764974a08ae4450ec30601ef99fe8834e) version 0.6 which is in our repos.

Warn if lib32- variant is missing when adding a group

2

When adding a new group, warn if the lib32 variant does not exists via a flashcard. Closes: #120

Fix sqlalchemy warnings before sqlalchemy 1.4

2

``` /usr/lib/python3.8/site-packages/sqlalchemy/orm/relationships.py:1912: SAWarning: Setting backref / back_populates on relationship CVEVersion.version_parent to refer to viewonly relationship CVE.versions will be deprecated in SQLAlchemy 1.4, and will be disallowed in a future release....

Add footer with license and link to source code

7

Add a footer to the tracker with a license information and a link to our source code.

import cve's automatically with a queue where CVe's can be reviewed

5

It would be nice to import CVE's automatically using an API maybe such as https://cve.circl.lu/api/ or https://nvd.nist.gov/vuln/data-feeds and add a review / queue to the security tracker to review these...