Summary
[356.4-1.0.1]
- Apply the patch for duplicate reference [Orabug: 39250109]
- Storage: Enable btrfs support [Orabug: 37464632]
- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 34030494]
- Update documentation links [Orabug: 30271413], [Orabug: 32013095],
[Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
- Update spec file for new release
[356.4]
- Remove recommends on subscription-manager-cockpit if applicable
[356.4-1]
- ws: Free language string also when it comes from the cookie (RHEL-244637) [CVE-2026-76235]
- ws: don't crash when urlroot has no trailing slash (RHEL-262905) [CVE-2026-91147]
- tls: Limit concurrent connections (RHEL-263074) [CVE-2026-91149]
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | cockpit | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-bridge | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-doc | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-packagekit | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-storaged | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-system | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-ws | 0:356.4-1.0.1.el9_8 |
| Oracle Linux · 9 | cockpit-ws-selinux | 0:356.4-1.0.1.el9_8 |
Vulnerabilities 3
-
High 7.5
Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html
A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of servi…
-
High 7.5
Cockpit: cockpit: denial of service via unbounded connection thread spawning
A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the `cockpit-tls` service. This forces the service to create an unbounded number of detached threa…
-
Medium 5.9
Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash
A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the `WebService.UrlRoot` is configured and a request is made to the exact URL-root p…