Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.26-openssl Important Security Fixes Advisory 2026-3102-1

Calendar White Jul 17, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Python311 Important Memory Error Command Injection Fix 2026-3104-1

Calendar White Jul 17, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php-composer2 Important Vulnerability Update 2026-3105-1

Calendar White Jul 17, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE mariadb-connector-c Important Issue CVE-2026-44172

Calendar White Jul 17, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 chromium Important Heap Buffer Overflow Vuln 2026-32e3e23696

Calendar White Jul 17, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 Node-Exporter Minor Denial of Service Patch 2026-5924722657

Calendar White Jul 17, 2026
Low
Fedora Large Esm H800
Fedora

Fedora 43 spoofdpi Moderate Configuration Issue Fix 2026-77f23c0bc4

Calendar White Jul 17, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 yq Important Cross-Site Scripting Vuln 2026-990cdd8329

Calendar White Jul 17, 2026
Important
Fedora Large Esm H900
Fedora

Fedora version 43 brings vital security upgrades for Ruby CVE-2026-41316

Calendar White Jul 17, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 38 articles for you...
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryremote code executionimportant

Oracle Linux 10 cockpit Important Update Remote Code Exec ELSA-2026-21676

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-21676 http://linux.oracle.com/errata/ELSA-2026-21676.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: cockpit-356.2-1.0.1.el10_2.x86_64.rpm cockpit-bridge-356.2-1.0.1.el10_2.noarch.rpm cockpit-doc-356.2-1.0.1.el10_2.noarch.rpm cockpit-packagekit-356.2-1.0.1.el10_2.noarch.rpm cockpit-storaged-356.2-1.0.1.el10_2.noarch.rpm cockpit-system-356.2-1.0.1.el10_2.noarch.rpm cockpit-ws-356.2-1.0.1.el10_2.x86_64.rpm cockpit-ws-selinux-356.2-1.0.1.el10_2.x86_64.rpm aarch64: cockpit-356.2-1.0.1.el10_2.aarch64.rpm cockpit-bridge-356.2-1.0.1.el10_2.noarch.rpm cockpit-doc-356.2-1.0.1.el10_2.noarch.rpm cockpit-packagekit-356.2-1.0.1.el10_2.noarch.rpm cockpit-storaged-356.2-1.0.1.el10_2.noarch.rpm cockpit-system-356.2-1.0.1.el10_2.noarch.rpm cockpit-ws-356.2-1.0.1.el10_2.aarch64.rpm cockpit-ws-selinux-356.2-1.0.1.el10_2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/cockpit-356.2-1.0.1.el10_2.src.rpm Related CVEs: CVE-2026-4802 Description of changes: [356.2-1.0.1] - Storage: Enable btrfs support [Orabug: 37464632] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation links [Orabug: 30271413], [Orabug: 32013095], [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273] - Update spec file for new release [356.1-1] - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 10 advises important updates for cockpit to fix remote code execution issues and enhancestorage support.. Oracle Linux, cockpit updates, remote execution, Linux security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 17, 2026 •Important Oracle
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEremote execution

SUSE Linux Micro 5.5 Cockpit Important Remote Execution Issues 2026-2363-1

An update that solves four vulnerabilities can now be installed.. # Security update for cockpit Announcement ID: SUSE-SU-2026:2363-1 Release Date: 2026-06-11T06:54:19Z Rating: important References: * bsc#1257838 * bsc#1258900 * bsc#1259015 * bsc#1265040 Cross-References: * CVE-2026-25547 * CVE-2026-27606 * CVE-2026-27904 * CVE-2026-4802 CVSS scores: * CVE-2026-25547 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25547 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25547 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27606 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-27606 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-27606 ( NVD ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27606 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27904 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-27904 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-27904 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4802 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4802 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-4802 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Micro 5.5 An update that solves four vulnerabilities can now be installed. ## Description: This update for cockpit fixes the following issues * CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI (bsc#1265040). * CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257838). * CVE-2026-27606: rollup: Arbitrary File Write via Path Traversal in Rollup 4 (bsc#1258900). * CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential backtracking complexity and a ReDoS (bsc#1259015). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2363=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cockpit-debugsource-298-150500.3.12.1 * cockpit-ws-298-150500.3.12.1 * cockpit-bridge-debuginfo-298-150500.3.12.1 * cockpit-debuginfo-298-150500.3.12.1 * cockpit-bridge-298-150500.3.12.1 * cockpit-ws-debuginfo-298-150500.3.12.1 * cockpit-298-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * cockpit-selinux-298-150500.3.12.1 * cockpit-system-298-150500.3.12.1 * cockpit-storaged-298-150500.3.12.1 * cockpit-networkmanager-298-150500.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25547.html * https://www.suse.com/security/cve/CVE-2026-27606.html * https://www.suse.com/security/cve/CVE-2026-27904.html * https://www.suse.com/security/cve/CVE-2026-4802.html * https://bugzilla.suse.com/show_bug.cgi?id=1257838 * https://bugzilla.suse.com/show_bug.cgi?id=1258900 * https://bugzilla.suse.com/show_bug.cgi?id=1259015 * https://bugzilla.suse.com/show_bug.cgi?id=1265040 . Critical security update for SUSE addressing four important vulnerabilities in cockpit, enhancing system integrity and security.. SUSE cockpit security update vulnerabilities 2026 remote execution.. Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 11, 2026 •Important SuSE
Banner 1 1028x280 1708121660 1771599717
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisoryremote executionimportant

Mageia 9 Cockpit Important Remote Command Exec Vuln 2026-0175

Security update. Publication date: 05 Jun 2026 URL: https://advisories.mageia.org/MGASA-2026-0175.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-4802, CVE-2026-4631, CVE-2026-4800 Description: CVE-2026-4631, Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability. CVE-2026-4800, lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-4802, A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise. References: - https://bugs.mageia.org/show_bug.cgi?id=35563 - https://www.openwall.com/lists/oss-security/2026/05/20/19 - https://github.com/cockpit-project/cockpit/releases/tag/339 - https://github.com/cockpit-project/cockpit/releases/tag/340 - https://github.com/cockpit-project/cockpit/releases/tag/341 - https://github.com/cockpit-project/cockpit/releases/tag/341.1 - https://github.com/cockpit-project/cockpit/releases/tag/342 - https://github.com/cockpit-project/cockpit/releases/tag/343 - https://github.com/cockpit-project/cockpit/releases/tag/344 - https://github.com/cockpit-project/cockpit/releases/tag/345 - https://github.com/cockpit-project/cockpit/releases/tag/346 -https://github.com/cockpit-project/cockpit/releases/tag/347 - https://github.com/cockpit-project/cockpit/releases/tag/348 - https://github.com/cockpit-project/cockpit/releases/tag/349 - https://github.com/cockpit-project/cockpit/releases/tag/350 - https://github.com/cockpit-project/cockpit/releases/tag/351 - https://github.com/cockpit-project/cockpit/releases/tag/352 - https://github.com/cockpit-project/cockpit/releases/tag/353 - https://github.com/cockpit-project/cockpit/releases/tag/353.1 - https://github.com/cockpit-project/cockpit/releases/tag/354 - https://github.com/cockpit-project/cockpit/releases/tag/355 - https://github.com/cockpit-project/cockpit/releases/tag/356 - https://github.com/cockpit-project/cockpit/releases/tag/356.1 - https://github.com/cockpit-project/cockpit/releases/tag/356.2 - https://github.com/advisories/GHSA-rq49-h582-83m7 - https://github.com/advisories/GHSA-r5fr-rjxr-66jc - https://github.com/advisories/GHSA-3wjm-5g86-c6p3 - https://www.cve.org/CVERecord?id=CVE-2026-4802 - https://www.cve.org/CVERecord?id=CVE-2026-4631 - https://www.cve.org/CVERecord?id=CVE-2026-4800 SRPMS: - 9/core/cockpit-356.2-1.mga9 . Critical security advisory for Mageia Cockpit to address remote execution risks and vulnerabilities in June 2026.. Mageia Cockpit security update, remote command execution, code injection issues. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Important Mageia
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraimportant

Fedora 43 Cockpit Important Arbitrary Command Execution Fix 2026-58cee40a55

Automatic update for cockpit-362-1.fc43. Changelog for cockpit * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-58cee40a55 2026-06-05 04:07:33.979887+00:00 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 43 Version : 362 Release : 1.fc43 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: Automatic update for cockpit-362-1.fc43. Changelog for cockpit * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802) -------------------------------------------------------------------------------- ChangeLog: * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480095 - [Exploits (KEV)] CVE-2026-4802 cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480095 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-58cee40a55' at the command line. For more information, refer to the dnfdocumentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Fix for arbitrary command execution in Cockpit on Fedora 43 with important updates for system administration.. Fedora cockpit server administration. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Important Fedora
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedorabug fix

Fedora 43 Cockpit Critical Arbitrary Code Execution Fix 2026-58cee40a55

Automatic update for cockpit-362-1.fc43. Changelog for cockpit * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-58cee40a55 2026-06-05 04:07:33.979887+00:00 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 43 Version : 362 Release : 1.fc43 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: Automatic update for cockpit-362-1.fc43. Changelog for cockpit * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802) -------------------------------------------------------------------------------- ChangeLog: * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480095 - [Exploits (KEV)] CVE-2026-4802 cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480095 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-58cee40a55' at the command line. For more information, refer to the dnfdocumentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Cockpit update for Fedora 43 addresses critical arbitrary command execution flaw, strengthens overall security.. Fedora Cockpit Update Arbitrary Execution. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 •Important Fedora
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryupdateremote code execution

SUSE Linux Micro 6.1 Important Cockpit Remote Exec Vuln 2026-21872-1

An update that solves one vulnerability can now be installed.. # Security update for cockpit Announcement ID: SUSE-SU-2026:21872-1 Release Date: 2026-05-26T11:48:27Z Rating: important References: * bsc#1265040 Cross-References: * CVE-2026-4802 CVSS scores: * CVE-2026-4802 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4802 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-4802 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for cockpit fixes the following issue * CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI (bsc#1265040). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-548=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * cockpit-debuginfo-322-slfo.1.1_4.1 * cockpit-ws-322-slfo.1.1_4.1 * cockpit-ws-debuginfo-322-slfo.1.1_4.1 * cockpit-debugsource-322-slfo.1.1_4.1 * cockpit-bridge-debuginfo-322-slfo.1.1_4.1 * cockpit-bridge-322-slfo.1.1_4.1 * cockpit-322-slfo.1.1_4.1 * SUSE Linux Micro 6.1 (noarch) * cockpit-networkmanager-322-slfo.1.1_4.1 * cockpit-selinux-322-slfo.1.1_4.1 * cockpit-storaged-322-slfo.1.1_4.1 * cockpit-system-322-slfo.1.1_4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-4802.html * https://bugzilla.suse.com/show_bug.cgi?id=1265040 . Critical update for SUSE Linux Micro addressing important remote command execution issue in cockpit application.. SUSE Linux Micro,cockpit update,remote command execution,vulnerability fix. . Severity:Important. LinuxSecurity.com Team

Calendar%202 Jun 02, 2026 •Important SuSE
Banner 1 1028x280 1708121660 1771599717
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryremote accessvulnerability

Oracle Linux 8 Cockpit Important Security Advisory ELSA-2026-21700

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-21700 http://linux.oracle.com/errata/ELSA-2026-21700.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: cockpit-310.8-1.0.1.el8_10.x86_64.rpm cockpit-bridge-310.8-1.0.1.el8_10.x86_64.rpm cockpit-doc-310.8-1.0.1.el8_10.noarch.rpm cockpit-system-310.8-1.0.1.el8_10.noarch.rpm cockpit-ws-310.8-1.0.1.el8_10.x86_64.rpm aarch64: cockpit-310.8-1.0.1.el8_10.aarch64.rpm cockpit-bridge-310.8-1.0.1.el8_10.aarch64.rpm cockpit-doc-310.8-1.0.1.el8_10.noarch.rpm cockpit-system-310.8-1.0.1.el8_10.noarch.rpm cockpit-ws-310.8-1.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/cockpit-310.8-1.0.1.el8_10.src.rpm Related CVEs: CVE-2026-4802 Description of changes: [310.8-1.0.1] - Fixed cockpit_ws_t selinux issue for tmpfs [Orabug: 36013589] - Move update-motd out of cockpit_ws_t context [Orabug: 36013589] - Update documentation links [Orabug: 34706402] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 33862832] - Update documentation links [Orabug: 32795691] - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095] - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970] [310.8] - Remove recommends on subscription-manager-cockpit if applicable [310.8-1] - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) [310.7-1] - shell: Determine session idle time and countdown from clock time (RHEL-171011) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Advisory ELSA-2026-21700 offers updates for cockpit addressingcritical issues. Stay secure!. Oracle Linux updates, cockpit security, ELSA-2026-21700, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 29, 2026 •Important Oracle
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryremote code executionimportant

openSUSE Cockpit Important Remote Code Exec Fix CVE-2026-4802

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for cockpit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0176-1 Rating: important References: #1265040 Cross-References: CVE-2026-4802 CVSS scores: CVE-2026-4802 (SUSE): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cockpit fixes the following issues: - CVE-2026-4802: Fixed a remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI (boo#1265040). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-176=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le s390x x86_64): cockpit-321-bp157.2.3.2 cockpit-bridge-321-bp157.2.3.2 cockpit-devel-321-bp157.2.3.2 cockpit-pcp-321-bp157.2.3.2 cockpit-ws-321-bp157.2.3.2 - openSUSE Backports SLE-15-SP7 (noarch): cockpit-doc-321-bp157.2.3.2 cockpit-kdump-321-bp157.2.3.2 cockpit-networkmanager-321-bp157.2.3.2 cockpit-packagekit-321-bp157.2.3.2 cockpit-selinux-321-bp157.2.3.2 cockpit-storaged-321-bp157.2.3.2 cockpit-system-321-bp157.2.3.2 References: https://www.suse.com/security/cve/CVE-2026-4802.html https://bugzilla.suse.com/1265040 . An important security update for openSUSE fixes a remote command execution in the cockpit application.. openSUSE important update, cockpit RCEvulnerability, CVE-2026-4802 fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 23, 2026 •Important OpenSUSE
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics