ALSA-2026:86971

[ALSA-2026:86971] Moderate: cockpit-machines security update

Type:

security

Severity:

moderate

Release date:

2026-10-22

Description:

Cockpit component for managing libvirt virtual machines.  

Security Fix(es):  

  * cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments (CVE-2026-92768)
  * cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list (CVE-2026-92747)
  * cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments (CVE-2026-92745)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
noarch	cockpit-machines-348.1-1.el10_2.noarch.rpm	f07522ae8bce2750b2d0a9b32d8b9b159a43988af1d1d59a1c3ed9655cf017a5

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.