RLSA-2026:94485: Moderate: cockpit security, bug fix, and enhancement update
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.
Security Fix(es):
cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash (CVE-2026-91147)
cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in sendloginhtml (CVE-2026-76235)
Bug Fix(es) and Enhancement(s):
[cockpit] Overview page should not try to read insights-client.json anymore (JIRA:Rocky Linux-246964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/cockpitto a version that resolves this vulnerability.Fixed in 0:310.10-1.el8_10
Event History
Frequently Asked Questions
What can an unauthenticated remote attacker do?
The listed issues allow a remote unauthenticated attacker to cause a denial of service in cockpit-ws and to trigger a memory leak through the CockpitLang cookie handling in send_login_html. The provided CVSS vector indicates no privileges or user interaction are required.
Which Cockpit component is affected?
Both security fixes concern cockpit-ws, including URL-root handling without a trailing slash and CockpitLang cookie processing in send_login_html.
Is confidentiality or integrity impact reported?
The supplied CVSS vector reports no confidentiality or integrity impact, while availability impact is high.