ELSA-2026-21676

ELSA-2026-21676 - cockpit security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[356.2-1.0.1]
- Storage: Enable btrfs support [Orabug: 37464632]
- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 34030494]
- Update documentation links [Orabug: 30271413], [Orabug: 32013095],
[Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
- Update spec file for new release

[356.1-1]
- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)

Related CVEs

CVE-2026-4802

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	cockpit-356.2-1.0.1.el10_2.src.rpm	ee102ab51bdd7084a20729077f4f2ec1b36302ae80f802196f499ae6c5ecd589	-	ol10_aarch64_appstream
	cockpit-356.2-1.0.1.el10_2.src.rpm	ee102ab51bdd7084a20729077f4f2ec1b36302ae80f802196f499ae6c5ecd589	-	ol10_aarch64_baseos_latest
	cockpit-356.2-1.0.1.el10_2.src.rpm	ee102ab51bdd7084a20729077f4f2ec1b36302ae80f802196f499ae6c5ecd589	-	ol10_aarch64_u2_baseos_patch
	cockpit-356.2-1.0.1.el10_2.aarch64.rpm	8d915beee2ebf0c84c48f17962c1797afeef299cb4d2b1c1880d4fa04fdd7e4e	-	ol10_aarch64_baseos_latest
	cockpit-356.2-1.0.1.el10_2.aarch64.rpm	8d915beee2ebf0c84c48f17962c1797afeef299cb4d2b1c1880d4fa04fdd7e4e	-	ol10_aarch64_u2_baseos_patch
	cockpit-bridge-356.2-1.0.1.el10_2.noarch.rpm	f3b5939a1b1bbed18e300dbb76e1ceb824cafc7ec76bf9d76a683f45d2288941	-	ol10_aarch64_baseos_latest
	cockpit-bridge-356.2-1.0.1.el10_2.noarch.rpm	f3b5939a1b1bbed18e300dbb76e1ceb824cafc7ec76bf9d76a683f45d2288941	-	ol10_aarch64_u2_baseos_patch
	cockpit-doc-356.2-1.0.1.el10_2.noarch.rpm	bf59df9645ef78896b5f4c43e0e3a892ec8b5aa8d4569c39b3a85bbdeab3d1f1	-	ol10_aarch64_baseos_latest
	cockpit-doc-356.2-1.0.1.el10_2.noarch.rpm	bf59df9645ef78896b5f4c43e0e3a892ec8b5aa8d4569c39b3a85bbdeab3d1f1	-	ol10_aarch64_u2_baseos_patch
	cockpit-packagekit-356.2-1.0.1.el10_2.noarch.rpm	101667c6c3d7523965506988d6cd592e283c41eef7181c1257da9c3d42b7858c	-	ol10_aarch64_appstream
	cockpit-storaged-356.2-1.0.1.el10_2.noarch.rpm	95aee0f52718a86af6db70a711d2aecca4e844e4b1e78d2a553bec9b7bdaae1e	-	ol10_aarch64_appstream
	cockpit-system-356.2-1.0.1.el10_2.noarch.rpm	5858b93e5ac3d64337303b9defe54bdb5d8c7d26fadf7859fb9cf3db8dd7c01e	-	ol10_aarch64_baseos_latest
	cockpit-system-356.2-1.0.1.el10_2.noarch.rpm	5858b93e5ac3d64337303b9defe54bdb5d8c7d26fadf7859fb9cf3db8dd7c01e	-	ol10_aarch64_u2_baseos_patch
	cockpit-ws-356.2-1.0.1.el10_2.aarch64.rpm	fe02164aa866337f18170370393d5eb25d6f3dda3085410a5aed08d6a138bc48	-	ol10_aarch64_baseos_latest
	cockpit-ws-356.2-1.0.1.el10_2.aarch64.rpm	fe02164aa866337f18170370393d5eb25d6f3dda3085410a5aed08d6a138bc48	-	ol10_aarch64_u2_baseos_patch
	cockpit-ws-selinux-356.2-1.0.1.el10_2.aarch64.rpm	4b342637e6ba8e3109cebc661b67dc3295a00978dfd3eda3ef44da47ff3884f9	-	ol10_aarch64_baseos_latest
	cockpit-ws-selinux-356.2-1.0.1.el10_2.aarch64.rpm	4b342637e6ba8e3109cebc661b67dc3295a00978dfd3eda3ef44da47ff3884f9	-	ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64)	cockpit-356.2-1.0.1.el10_2.src.rpm	ee102ab51bdd7084a20729077f4f2ec1b36302ae80f802196f499ae6c5ecd589	-	ol10_x86_64_appstream
	cockpit-356.2-1.0.1.el10_2.src.rpm	ee102ab51bdd7084a20729077f4f2ec1b36302ae80f802196f499ae6c5ecd589	-	ol10_x86_64_baseos_latest
	cockpit-356.2-1.0.1.el10_2.src.rpm	ee102ab51bdd7084a20729077f4f2ec1b36302ae80f802196f499ae6c5ecd589	-	ol10_x86_64_u2_baseos_patch
	cockpit-356.2-1.0.1.el10_2.x86_64.rpm	f0703c5a34829c3206c2195dfdf451d003b50485596fdea9327b922610f5ea00	-	ol10_x86_64_baseos_latest
	cockpit-356.2-1.0.1.el10_2.x86_64.rpm	f0703c5a34829c3206c2195dfdf451d003b50485596fdea9327b922610f5ea00	-	ol10_x86_64_u2_baseos_patch
	cockpit-bridge-356.2-1.0.1.el10_2.noarch.rpm	f3b5939a1b1bbed18e300dbb76e1ceb824cafc7ec76bf9d76a683f45d2288941	-	ol10_x86_64_baseos_latest
	cockpit-bridge-356.2-1.0.1.el10_2.noarch.rpm	f3b5939a1b1bbed18e300dbb76e1ceb824cafc7ec76bf9d76a683f45d2288941	-	ol10_x86_64_u2_baseos_patch
	cockpit-doc-356.2-1.0.1.el10_2.noarch.rpm	bf59df9645ef78896b5f4c43e0e3a892ec8b5aa8d4569c39b3a85bbdeab3d1f1	-	ol10_x86_64_baseos_latest
	cockpit-doc-356.2-1.0.1.el10_2.noarch.rpm	bf59df9645ef78896b5f4c43e0e3a892ec8b5aa8d4569c39b3a85bbdeab3d1f1	-	ol10_x86_64_u2_baseos_patch
	cockpit-packagekit-356.2-1.0.1.el10_2.noarch.rpm	101667c6c3d7523965506988d6cd592e283c41eef7181c1257da9c3d42b7858c	-	ol10_x86_64_appstream
	cockpit-storaged-356.2-1.0.1.el10_2.noarch.rpm	95aee0f52718a86af6db70a711d2aecca4e844e4b1e78d2a553bec9b7bdaae1e	-	ol10_x86_64_appstream
	cockpit-system-356.2-1.0.1.el10_2.noarch.rpm	5858b93e5ac3d64337303b9defe54bdb5d8c7d26fadf7859fb9cf3db8dd7c01e	-	ol10_x86_64_baseos_latest
	cockpit-system-356.2-1.0.1.el10_2.noarch.rpm	5858b93e5ac3d64337303b9defe54bdb5d8c7d26fadf7859fb9cf3db8dd7c01e	-	ol10_x86_64_u2_baseos_patch
	cockpit-ws-356.2-1.0.1.el10_2.x86_64.rpm	ce93fce09a1c1f2b38580c3bfff6f6b8cff61d4d8d6208b71fe171f960106389	-	ol10_x86_64_baseos_latest
	cockpit-ws-356.2-1.0.1.el10_2.x86_64.rpm	ce93fce09a1c1f2b38580c3bfff6f6b8cff61d4d8d6208b71fe171f960106389	-	ol10_x86_64_u2_baseos_patch
	cockpit-ws-selinux-356.2-1.0.1.el10_2.x86_64.rpm	7ebd0a08741624fe25e14143c6f81e9d93633559a5d2860b0c37b06bebf84093	-	ol10_x86_64_baseos_latest
	cockpit-ws-selinux-356.2-1.0.1.el10_2.x86_64.rpm	7ebd0a08741624fe25e14143c6f81e9d93633559a5d2860b0c37b06bebf84093	-	ol10_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team