ELSA-2026-21468

ELSA-2026-21468 - cockpit security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-23

Description

[356.2-1.0.1]
- Apply the patch for duplicate reference [Orabug: 39250109]
- Storage: Enable btrfs support [Orabug: 37464632]
- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 34030494]
- Update documentation links [Orabug: 30271413], [Orabug: 32013095],
[Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
- Update spec file for new release

[356.2]
- Remove recommends on subscription-manager-cockpit if applicable

[356.1-1]
- ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
- node: update lodash dependency (RHEL-164196)

Related CVEs

CVE-2026-4802

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	cockpit-356.2-1.0.1.el9_8.src.rpm	e5e2b1bf46a941dfb7810c2943ccd4c6ebd85f17014367f0d2d3443844ace639	-	ol9_aarch64_appstream
	cockpit-356.2-1.0.1.el9_8.src.rpm	e5e2b1bf46a941dfb7810c2943ccd4c6ebd85f17014367f0d2d3443844ace639	-	ol9_aarch64_baseos_latest
	cockpit-356.2-1.0.1.el9_8.src.rpm	e5e2b1bf46a941dfb7810c2943ccd4c6ebd85f17014367f0d2d3443844ace639	-	ol9_aarch64_u8_baseos_patch
	cockpit-356.2-1.0.1.el9_8.aarch64.rpm	490208b01c8cf8af92f253f01b964eb247fde01130d0fa67cec23a879ee91ba3	-	ol9_aarch64_baseos_latest
	cockpit-356.2-1.0.1.el9_8.aarch64.rpm	490208b01c8cf8af92f253f01b964eb247fde01130d0fa67cec23a879ee91ba3	-	ol9_aarch64_u8_baseos_patch
	cockpit-bridge-356.2-1.0.1.el9_8.noarch.rpm	c53c375531b464f66d64ba9c8bfbc5997ada8c7234028ea5706f1269182356ce	-	ol9_aarch64_baseos_latest
	cockpit-bridge-356.2-1.0.1.el9_8.noarch.rpm	c53c375531b464f66d64ba9c8bfbc5997ada8c7234028ea5706f1269182356ce	-	ol9_aarch64_u8_baseos_patch
	cockpit-doc-356.2-1.0.1.el9_8.noarch.rpm	59176c5ff09621bf7a2db2a0fe007a69d99ff5dcc84d58b227d2a6ea88d8bd7d	-	ol9_aarch64_baseos_latest
	cockpit-doc-356.2-1.0.1.el9_8.noarch.rpm	59176c5ff09621bf7a2db2a0fe007a69d99ff5dcc84d58b227d2a6ea88d8bd7d	-	ol9_aarch64_u8_baseos_patch
	cockpit-packagekit-356.2-1.0.1.el9_8.noarch.rpm	5cf992b79b16dcea76a37e56053c652ce678ef6e3411fb42d646ad930af2d8c7	-	ol9_aarch64_appstream
	cockpit-storaged-356.2-1.0.1.el9_8.noarch.rpm	a5cab94f14e3219d07f24351ac556896c08ac225f011ae4235ed3141ecd32c83	-	ol9_aarch64_appstream
	cockpit-system-356.2-1.0.1.el9_8.noarch.rpm	bdb4ddbf0ac70b2d2ebc430528f4ad2ac9d69fd50f52c5f8c72305a21444bc64	-	ol9_aarch64_baseos_latest
	cockpit-system-356.2-1.0.1.el9_8.noarch.rpm	bdb4ddbf0ac70b2d2ebc430528f4ad2ac9d69fd50f52c5f8c72305a21444bc64	-	ol9_aarch64_u8_baseos_patch
	cockpit-ws-356.2-1.0.1.el9_8.aarch64.rpm	6d7bb18e62c3c196c268f901f8b29dfded77bc6d5fcdd40e72806707e6eba9d4	-	ol9_aarch64_baseos_latest
	cockpit-ws-356.2-1.0.1.el9_8.aarch64.rpm	6d7bb18e62c3c196c268f901f8b29dfded77bc6d5fcdd40e72806707e6eba9d4	-	ol9_aarch64_u8_baseos_patch
	cockpit-ws-selinux-356.2-1.0.1.el9_8.aarch64.rpm	8b5a218c995347998692e1c77e3cac341fc42590498eaf001e7aed8dd21adf49	-	ol9_aarch64_baseos_latest
	cockpit-ws-selinux-356.2-1.0.1.el9_8.aarch64.rpm	8b5a218c995347998692e1c77e3cac341fc42590498eaf001e7aed8dd21adf49	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	cockpit-356.2-1.0.1.el9_8.src.rpm	e5e2b1bf46a941dfb7810c2943ccd4c6ebd85f17014367f0d2d3443844ace639	-	ol9_x86_64_appstream
	cockpit-356.2-1.0.1.el9_8.src.rpm	e5e2b1bf46a941dfb7810c2943ccd4c6ebd85f17014367f0d2d3443844ace639	-	ol9_x86_64_baseos_latest
	cockpit-356.2-1.0.1.el9_8.src.rpm	e5e2b1bf46a941dfb7810c2943ccd4c6ebd85f17014367f0d2d3443844ace639	-	ol9_x86_64_u8_baseos_patch
	cockpit-356.2-1.0.1.el9_8.x86_64.rpm	bf357482381b4539dfa903c18474ac64c40c72f5c8df2b82f21506e0efdbc399	-	ol9_x86_64_baseos_latest
	cockpit-356.2-1.0.1.el9_8.x86_64.rpm	bf357482381b4539dfa903c18474ac64c40c72f5c8df2b82f21506e0efdbc399	-	ol9_x86_64_u8_baseos_patch
	cockpit-bridge-356.2-1.0.1.el9_8.noarch.rpm	c53c375531b464f66d64ba9c8bfbc5997ada8c7234028ea5706f1269182356ce	-	ol9_x86_64_baseos_latest
	cockpit-bridge-356.2-1.0.1.el9_8.noarch.rpm	c53c375531b464f66d64ba9c8bfbc5997ada8c7234028ea5706f1269182356ce	-	ol9_x86_64_u8_baseos_patch
	cockpit-doc-356.2-1.0.1.el9_8.noarch.rpm	59176c5ff09621bf7a2db2a0fe007a69d99ff5dcc84d58b227d2a6ea88d8bd7d	-	ol9_x86_64_baseos_latest
	cockpit-doc-356.2-1.0.1.el9_8.noarch.rpm	59176c5ff09621bf7a2db2a0fe007a69d99ff5dcc84d58b227d2a6ea88d8bd7d	-	ol9_x86_64_u8_baseos_patch
	cockpit-packagekit-356.2-1.0.1.el9_8.noarch.rpm	5cf992b79b16dcea76a37e56053c652ce678ef6e3411fb42d646ad930af2d8c7	-	ol9_x86_64_appstream
	cockpit-storaged-356.2-1.0.1.el9_8.noarch.rpm	a5cab94f14e3219d07f24351ac556896c08ac225f011ae4235ed3141ecd32c83	-	ol9_x86_64_appstream
	cockpit-system-356.2-1.0.1.el9_8.noarch.rpm	bdb4ddbf0ac70b2d2ebc430528f4ad2ac9d69fd50f52c5f8c72305a21444bc64	-	ol9_x86_64_baseos_latest
	cockpit-system-356.2-1.0.1.el9_8.noarch.rpm	bdb4ddbf0ac70b2d2ebc430528f4ad2ac9d69fd50f52c5f8c72305a21444bc64	-	ol9_x86_64_u8_baseos_patch
	cockpit-ws-356.2-1.0.1.el9_8.x86_64.rpm	817c25a76133f5ae122d401d1bfd0e3fa961723ab2f143607f51f408ca84b02a	-	ol9_x86_64_baseos_latest
	cockpit-ws-356.2-1.0.1.el9_8.x86_64.rpm	817c25a76133f5ae122d401d1bfd0e3fa961723ab2f143607f51f408ca84b02a	-	ol9_x86_64_u8_baseos_patch
	cockpit-ws-selinux-356.2-1.0.1.el9_8.x86_64.rpm	f70e72f6d0cc1f15aa94443888cd9d1f459aeef84dd75d9c65261fc120264da9	-	ol9_x86_64_baseos_latest
	cockpit-ws-selinux-356.2-1.0.1.el9_8.x86_64.rpm	f70e72f6d0cc1f15aa94443888cd9d1f459aeef84dd75d9c65261fc120264da9	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team