RLSA-2026:96250

Security

Mirrored from RHSA-2026:96250

Issued at: 2026-11-10

Updated at: 2026-11-10

Advisory content derived from Red Hat RHSA-2026:96250, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: cockpit security update

Description

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

* cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash (CVE-2026-91147)

* cockpit: Cockpit: Denial of Service via unbounded connection thread spawning (CVE-2026-91149)

* cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html (CVE-2026-76235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2479230

2479422

2519497

CVEs

CVE-2026-76235

CVE-2026-91147

CVE-2026-91149

Affected packages

Rocky Linux 10 ppc64le - BaseOS

cockpit-0:356.4-1.el10_2.rocky.0.1.ppc64le.rpm

cockpit-debugsource-0:356.4-1.el10_2.rocky.0.1.ppc64le.rpm

cockpit-ws-selinux-0:356.4-1.el10_2.rocky.0.1.ppc64le.rpm

cockpit-ws-0:356.4-1.el10_2.rocky.0.1.ppc64le.rpm

cockpit-system-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-bridge-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-debuginfo-0:356.4-1.el10_2.rocky.0.1.ppc64le.rpm

cockpit-doc-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-0:356.4-1.el10_2.rocky.0.1.src.rpm

Rocky Linux 10 x86_64 - BaseOS

cockpit-0:356.4-1.el10_2.rocky.0.1.x86_64.rpm

cockpit-system-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-bridge-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-debugsource-0:356.4-1.el10_2.rocky.0.1.x86_64.rpm

cockpit-debuginfo-0:356.4-1.el10_2.rocky.0.1.x86_64.rpm

cockpit-doc-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-ws-0:356.4-1.el10_2.rocky.0.1.x86_64.rpm

cockpit-ws-selinux-0:356.4-1.el10_2.rocky.0.1.x86_64.rpm

cockpit-0:356.4-1.el10_2.rocky.0.1.src.rpm

Rocky Linux 10 s390x - BaseOS

cockpit-debuginfo-0:356.4-1.el10_2.rocky.0.1.s390x.rpm

cockpit-ws-selinux-0:356.4-1.el10_2.rocky.0.1.s390x.rpm

cockpit-system-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-bridge-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-0:356.4-1.el10_2.rocky.0.1.s390x.rpm

cockpit-doc-0:356.4-1.el10_2.rocky.0.1.noarch.rpm

cockpit-debugsource-0:356.4-1.el10_2.rocky.0.1.s390x.rpm

cockpit-0:356.4-1.el10_2.rocky.0.1.src.rpm

cockpit-ws-0:356.4-1.el10_2.rocky.0.1.s390x.rpm