[ALSA-2026:94485] Moderate: cockpit security, bug fix, and enhancement update
Type:
security
Severity:
moderate
Release date:
2026-11-03
Description:
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash (CVE-2026-91147) * cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235) Bug Fix(es) and Enhancement(s): * [cockpit] Overview page should not try to read insights-client.json anymore (JIRA:RHEL-246964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 cockpit-ws-310.10-1.el8_10.aarch64.rpm 6d3a95b794195b37c4d92dfb3cfa7c6b9d51eaddb2de82a635c1812b0b6946af
aarch64 cockpit-310.10-1.el8_10.aarch64.rpm 719d6e7b9001fd481dd3c9c729a5c29f2da536dcf2ee7726e44602c9bcd71965
aarch64 cockpit-bridge-310.10-1.el8_10.aarch64.rpm ae4caad6aa78b91f3cee598095c1836d98fadcdf0602e9e5e3aea3d945de7d47
noarch cockpit-doc-310.10-1.el8_10.noarch.rpm 79f6ac4f5f58f6720a7130111db9d5bbffc5fe68169a055592beb326e7c607c2
noarch cockpit-system-310.10-1.el8_10.noarch.rpm 85b77ef4a05a1507ee22ecda16feaacea71f17870da2e29908d27941952568b8
ppc64le cockpit-bridge-310.10-1.el8_10.ppc64le.rpm c09b9015796d91ba3b9a5001e522368029cb869f36bc075e4db3a187e5644815
ppc64le cockpit-ws-310.10-1.el8_10.ppc64le.rpm c423c16d199706974431be178d5b53d6b734708e1a5b0a354eafa14090f9e60d
ppc64le cockpit-310.10-1.el8_10.ppc64le.rpm f4964d8b66f6bb4eedb352fdaad7dab6ef388b788e06ac00d5f757fe45823392
s390x cockpit-bridge-310.10-1.el8_10.s390x.rpm 00ed4ccd1c0cf88e50bbabb9029741e43c2badd6bc56120053b0ec2bc9554578
s390x cockpit-310.10-1.el8_10.s390x.rpm 4bdaf5f566257dcc28640af6397b7cd2e3e3b5eba25c5d7e41cd190cfb12d5bb
s390x cockpit-ws-310.10-1.el8_10.s390x.rpm bb2a66dcbc4f3a09e811f278840b242bf2ad801ac75d2d204a1e52816cde2655
x86_64 cockpit-ws-310.10-1.el8_10.x86_64.rpm 1109b191d8e39ab56f153c51011f1ed873cddd7248638946536c72d320780c33
x86_64 cockpit-bridge-310.10-1.el8_10.x86_64.rpm 4896d02fa70f571394b921caacdf3bfc7116c5cf128ddcb4de54684ec22354c4
x86_64 cockpit-310.10-1.el8_10.x86_64.rpm ad20d4001846e3b881299a7460d284461575d48df8afa8a07dd206c43b4d2539
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.