Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -1 articles for you...
89
security advisoryfedoraimportantFedora 43 Cockpit Important Arbitrary Command Execution Fix 2026-58cee40a55
Automatic update for cockpit-362-1.fc43. Changelog for cockpit * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-58cee40a55 2026-06-05 04:07:33.979887+00:00 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 43 Version : 362 Release : 1.fc43 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: Automatic update for cockpit-362-1.fc43. Changelog for cockpit * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802) -------------------------------------------------------------------------------- ChangeLog: * Wed May 20 2026 Packit - 362-1 - Bug fixes and translation updates - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480095 - [Exploits (KEV)] CVE-2026-4802 cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480095 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-58cee40a55' at the command line. For more information, refer to the dnfdocumentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 05, 2026
•Important
Fedora
89
security advisoryfedoracommand lineFedora 42 Cockpit Moderate Hostname Management Vulnerability CVE-2026-4631
ws: be more explicit when handling hostnames on cli [CVE-2026-4631]. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-134819a61b 2026-04-28 01:11:18.587340+00:00 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 42 Version : 357 Release : 2.fc42 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: ws: be more explicit when handling hostnames on cli [CVE-2026-4631] -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 10 2026 Jelle van der Waa - 357-2 - ws: be more explicit when handling hostnames on cli (CVE-2026-4631) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-134819a61b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 28, 2026
•Important
Fedora
89
security advisoryfedoraremote code executionFedora 44 Cockpit Important Update CVE-2026-4631 Remote Command Execution
Automatic update for cockpit-360.1-1.fc44. Changelog for cockpit * Tue Apr 14 2026 Packit - 360.1-1 - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ea792bf240 2026-04-16 23:40:54.273546+00:00 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 44 Version : 360.1 Release : 1.fc44 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: Automatic update for cockpit-360.1-1.fc44. Changelog for cockpit * Tue Apr 14 2026 Packit - 360.1-1 - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855) - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855) * Wed Apr 08 2026 Packit - 360-1 - ws: be more explicit when handling hostnames on cli [CVE-2026-4631] - ws: support loading a custom login page - Translation updates Automatic update for cockpit-360-1.fc44. Changelog for cockpit * Wed Apr 08 2026 Packit - 360-1 - ws: be more explicit when handling hostnames on cli [CVE-2026-4631] - ws: support loading a custom login page - Translation updates -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 14 2026 Packit - 360.1-1 - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855) - Remove "Mount" action in Anaconda mode(https://bugzilla.redhat.com/show_bug.cgi?id=2455855) * Wed Apr 8 2026 Packit - 360-1 - ws: be more explicit when handling hostnames on cli [CVE-2026-4631] - ws: support loading a custom login page - Translation updates -------------------------------------------------------------------------------- References: [ 1 ] Bug #2455855 - Storage editor fails to prevent mounting btrfs / subv over /home subv https://bugzilla.redhat.com/show_bug.cgi?id=2455855 [ 2 ] Bug #2458620 - CVE-2026-4631 cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection https://bugzilla.redhat.com/show_bug.cgi?id=2458620 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ea792bf240' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 16, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 43 Cockpit Critical CVE-2026-4631 Update Advisory 2026-42f1aaa820
Automatic update for cockpit-360-1.fc43. Changelog for cockpit * Wed Apr 08 2026 Packit - 360-1 - ws: be more explicit when handling hostnames on cli [CVE-2026-4631] - ws: support loading a custom login page. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-42f1aaa820 2026-04-10 00:59:15.834494+00:00 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 43 Version : 360 Release : 1.fc43 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: Automatic update for cockpit-360-1.fc43. Changelog for cockpit * Wed Apr 08 2026 Packit - 360-1 - ws: be more explicit when handling hostnames on cli [CVE-2026-4631] - ws: support loading a custom login page - Translation updates -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 8 2026 Packit - 360-1 - ws: be more explicit when handling hostnames on cli [CVE-2026-4631] - ws: support loading a custom login page - Translation updates -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-42f1aaa820' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 10, 2026
•Critical
Fedora
89
security advisorysecurity updateupdateFedora 38: 2024-31e83b461d moderate: Fix Cockpit Command Injection
sosreport: Fix command injection with crafted report names [CVE-2024-2947]. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-31e83b461d 2024-04-18 01:14:20.877442 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 38 Version : 311.2 Release : 1.fc38 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: sosreport: Fix command injection with crafted report names [CVE-2024-2947] -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 2 2024 Packit - 311.2-1 - sosreport: Fix command injection with crafted report names [CVE-2024-2947] -------------------------------------------------------------------------------- References: [ 1 ] Bug #2271815 - CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271815 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-31e83b461d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 18, 2024
Fedora
89
security advisoryFedoracommand injectionFedora 39: 2024-7053101990 Moderate - Cockpit Command Injection Flaw Fixed
Automatic update for cockpit-314-1.fc39.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-6065341780 2024-03-30 01:08:11.513675 -------------------------------------------------------------------------------- Name : cockpit Product : Fedora 39 Version : 314 Release : 1.fc39 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. -------------------------------------------------------------------------------- Update Information: Automatic update for cockpit-314-1.fc39. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 28 2024 Packit - 314-1 - Diagnostic reports: Fix command injection vulnerability with crafted report names - Storage: Improvements to read-only encrypted filesystems -------------------------------------------------------------------------------- References: [ 1 ] Bug #2271614 - CVE-2024-2947 cockpit: command injection when deleting a sosreport with a crafted name https://bugzilla.redhat.com/show_bug.cgi?id=2271614 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-6065341780' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 30, 2024
Fedora
98
security advisoryRed Hatimportant updateRed Hat AMQ Broker 7.8.7 RHSA-2022:6292-01 Important: HTML Injection Fix
Red Hat AMQ Broker 7.8.7 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat AMQ Broker 7.8.7 release and security update Advisory ID: RHSA-2022:6292-01 Product: Red Hat JBoss AMQ Advisory URL: https://access.redhat.com/errata/RHSA-2022:6292 Issue date: 2022-09-01 CVE Names: CVE-2022-35278 ==================================================================== 1. Summary: Red Hat AMQ Broker 7.8.7 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms. This release of Red Hat AMQ Broker 7.8.7 serves as a replacement for Red Hat AMQ Broker 7.8.6, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section. Security Fix(es): * artemis-plugin: activemq-artemis: AMQ Broker web console HTML Injection (CVE-2022-35278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: Before applying the update, back up your existing installation, including allapplications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update). 4. Bugs fixed (https://bugzilla.redhat.com/): 2109805 - CVE-2022-35278 activemq-artemis: AMQ Broker web console HTML Injection 5. References: https://access.redhat.com/security/cve/CVE-2022-35278 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.broker&version=7.8.7 https://access.redhat.com/documentation/en-us/red_hat_amq/ 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYxCI3NzjgjWX9erEAQhXPQ//evF+wS+qIbMzTyHsDPwN9HUHkEsqe0Zf yS6InsjK8VPVDNx96Q0OthS6A/qCYaHFCPZCZvaBYuj8KT2odH1VqRTT9wLa9y/f 0hFvqMtUDmCu7IBMhwmUkzRH/TlM6LAxzlvUhkuSEIXCIIaFE+Rif+zcF4qYbnZV AvXzSIP1f2HGOXgVgxgoYR0zI0wldCwq+29w4+BJGcjGd2mk5Fwsc2KeBY0PAYCH PFtkPnnV1LkFMzPHrFwYHC8GwtO5kUBpUlOb4Abd82hXIRH5zJVOLUWyjA4OdU6b hkbmkcyABoUzNRVfTt3TOwZ7F7eCAj9Kleke9S0+5H3a5rPY4pOOUXodRaAZjkhL h4twQIkvtgqeidA7cVbbCRDcIJDuJb+cWxrlxdAYh1OWBavlyGaIvK6vdL5dv57A T6diUX49udNsC77ncSmCySt1kt+tGNxEhmPYBSeqUsjaap8ikuABr7qoqoxKLcQS rq2O9sYMICg71C7CnKyyJJB6FUa7uh+kq670h/+aDGK8MExiGUEdMQeNSfWYd0MO PJ6TtyApkyR12EqP+DhBLpy4JM173DDNACpduMFp4pBtskpaWL0lRfa5N4tS3G8Y KW2iR/MEQFKfPYy673S/bgMy3mW+cn84FrbAhXWVbOG9/4rKzAhJWE1/FiseOajU xb10bkQYL7E=Q4jI -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 01, 2022
•Important
Red Hat
89
security advisoryupdateFedoraFedora 34: 2022-675c38e70e Important Update on Cockpit Certificate Login
- Certificate login validation: Action required on updates - Client: Show previously used hosts - Client: Support port specification - bridge: Warning on missing cockpit-system package. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-675c38e70e 2022-01-14 00:58:29.597743 --------------------------------------------------------------------------------Name : cockpit Product : Fedora 34 Version : 260 Release : 1.fc34 URL : https://cockpit-project.org/ Summary : Web Console for Linux servers Description : The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. --------------------------------------------------------------------------------Update Information: - Certificate login validation: Action required on updates - Client: Show previously used hosts - Client: Support port specification - bridge: Warning on missing cockpit-system package --------------------------------------------------------------------------------ChangeLog: * Wed Jan 5 2022 Martin Pitt - 260-1 - Certificate login validation: Action required on updates - Client: Show previously used hosts - Client: Support port specification - bridge: Warning on missing cockpit-system package --------------------------------------------------------------------------------References: [ 1 ] Bug #1998513 - CVE-2021-3698 cockpit: authenticates with revoked certificates [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1998513 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-675c38e70e' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 13, 2022
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!