RLSA-2026:94533

Security

Mirrored from RHSA-2026:94533

Issued at: 2026-11-04

Updated at: 2026-11-04

Advisory content derived from Red Hat RHSA-2026:94533, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: cockpit security update

Description

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

* cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash (CVE-2026-91147)

* cockpit: Cockpit: Denial of Service via unbounded connection thread spawning (CVE-2026-91149)

* cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64

Rocky Linux 9 ppc64le

Rocky Linux 9 s390x

Rocky Linux 9 x86_64

Fixes

2479230

2479422

2519497

CVEs

CVE-2026-76235

CVE-2026-91147

CVE-2026-91149

Affected packages

Rocky Linux 9 aarch64 - BaseOS

cockpit-0:356.4-1.el9_8.rocky.0.1.aarch64.rpm

cockpit-0:356.4-1.el9_8.rocky.0.1.src.rpm

cockpit-bridge-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-debuginfo-0:356.4-1.el9_8.rocky.0.1.aarch64.rpm

cockpit-debugsource-0:356.4-1.el9_8.rocky.0.1.aarch64.rpm

cockpit-doc-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-system-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-ws-0:356.4-1.el9_8.rocky.0.1.aarch64.rpm

cockpit-ws-selinux-0:356.4-1.el9_8.rocky.0.1.aarch64.rpm

Rocky Linux 9 ppc64le - BaseOS

cockpit-0:356.4-1.el9_8.rocky.0.1.ppc64le.rpm

cockpit-0:356.4-1.el9_8.rocky.0.1.src.rpm

cockpit-bridge-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-debuginfo-0:356.4-1.el9_8.rocky.0.1.ppc64le.rpm

cockpit-debugsource-0:356.4-1.el9_8.rocky.0.1.ppc64le.rpm

cockpit-doc-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-system-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-ws-0:356.4-1.el9_8.rocky.0.1.ppc64le.rpm

cockpit-ws-selinux-0:356.4-1.el9_8.rocky.0.1.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

cockpit-0:356.4-1.el9_8.rocky.0.1.s390x.rpm

cockpit-0:356.4-1.el9_8.rocky.0.1.src.rpm

cockpit-bridge-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-debuginfo-0:356.4-1.el9_8.rocky.0.1.s390x.rpm

cockpit-debugsource-0:356.4-1.el9_8.rocky.0.1.s390x.rpm

cockpit-doc-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-system-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-ws-0:356.4-1.el9_8.rocky.0.1.s390x.rpm

cockpit-ws-selinux-0:356.4-1.el9_8.rocky.0.1.s390x.rpm

Rocky Linux 9 x86_64 - BaseOS

cockpit-0:356.4-1.el9_8.rocky.0.1.src.rpm

cockpit-0:356.4-1.el9_8.rocky.0.1.x86_64.rpm

cockpit-bridge-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-debuginfo-0:356.4-1.el9_8.rocky.0.1.x86_64.rpm

cockpit-debugsource-0:356.4-1.el9_8.rocky.0.1.x86_64.rpm

cockpit-doc-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-system-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-ws-0:356.4-1.el9_8.rocky.0.1.x86_64.rpm

cockpit-ws-selinux-0:356.4-1.el9_8.rocky.0.1.x86_64.rpm

Rocky Linux 9 x86_64 - AppStream

cockpit-packagekit-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-storaged-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

Rocky Linux 9 aarch64 - AppStream

cockpit-packagekit-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-storaged-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

Rocky Linux 9 s390x - AppStream

cockpit-packagekit-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-storaged-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

Rocky Linux 9 ppc64le - AppStream

cockpit-packagekit-0:356.4-1.el9_8.rocky.0.1.noarch.rpm

cockpit-storaged-0:356.4-1.el9_8.rocky.0.1.noarch.rpm