[ALSA-2026:84595] Moderate: cockpit-files security update
Type:
security
Severity:
moderate
Release date:
2026-10-22
Description:
A filesystem browser for Cockpit Security Fix(es): * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste (CVE-2026-91202) * cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
noarch cockpit-files-36.1-1.el9_8.noarch.rpm 771c5fdb9d2cae1039c07d0302d2d72f22915b85a4b25e83a8e7f156a4088952
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.