Summary
[310.10.2-1.0.1]
- Fixed cockpit_ws_t selinux issue for tmpfs [Orabug: 36013589]
- Move update-motd out of cockpit_ws_t context [Orabug: 36013589]
- Update documentation links [Orabug: 34706402]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 33862832]
- Update documentation links [Orabug: 32795691]
- Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
- Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]
[310.10.2]
- Remove recommends on subscription-manager-cockpit if applicable
[310.10.2-1]
- ws: limit size of reassembled websocket frames (RHEL-263032) [CVE-2026-91150]
- users: Add authorized SSH key as user (RHEL-263044) [CVE-2026-91151]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cockpit | 0:310.10.2-1.0.1.el8_10 |
| Oracle Linux · 8 | cockpit-bridge | 0:310.10.2-1.0.1.el8_10 |
| Oracle Linux · 8 | cockpit-doc | 0:310.10.2-1.0.1.el8_10 |
| Oracle Linux · 8 | cockpit-system | 0:310.10.2-1.0.1.el8_10 |
| Oracle Linux · 8 | cockpit-ws | 0:310.10.2-1.0.1.el8_10 |
Vulnerabilities 2
-
High 7.5
Cockpit: cockpit: denial of service via unbounded fragmented websocket messages
A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a…
-
High 7.3
Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper
A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory can exploit a privileged symlink dereference vulnerability in the `ssh-add-public-key.sh` helper. When this helper runs with elevated privileges, it ca…