ELSA-2026-94485

ELSA-2026-94485 - cockpit security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-11-03

Description

[310.10-1.0.1]
- Fixed cockpit_ws_t selinux issue for tmpfs [Orabug: 36013589]
- Move update-motd out of cockpit_ws_t context [Orabug: 36013589]
- Update documentation links [Orabug: 34706402]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 33862832]
- Update documentation links [Orabug: 32795691]
- Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
- Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]

[310.10]
- Remove recommends on subscription-manager-cockpit if applicable

[310.10-1]
- ws: don't crash when urlroot has no trailing slash (RHEL-262904) [CVE-2026-91147]
- ws: Free language string also when it comes from the cookie (RHEL-244631) [CVE-2026-76235]
- packagekit: Sanitize markdown urls [CVE-2026-91148]

Related CVEs

CVE-2026-76235

CVE-2026-91147

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	cockpit-310.10-1.0.1.el8_10.src.rpm	a1f0b988ffaece80524d8272671b41f0cc71c434e654c252b93660dbd718f003	-	ol8_aarch64_baseos_latest
	cockpit-310.10-1.0.1.el8_10.src.rpm	a1f0b988ffaece80524d8272671b41f0cc71c434e654c252b93660dbd718f003	-	ol8_aarch64_u10_baseos_patch
	cockpit-310.10-1.0.1.el8_10.aarch64.rpm	3f504d1ec22d1ef956eeef14a54936302e548d360fb55803dc3a8f9e3e082df2	-	ol8_aarch64_baseos_latest
	cockpit-310.10-1.0.1.el8_10.aarch64.rpm	3f504d1ec22d1ef956eeef14a54936302e548d360fb55803dc3a8f9e3e082df2	-	ol8_aarch64_u10_baseos_patch
	cockpit-bridge-310.10-1.0.1.el8_10.aarch64.rpm	00ddb1bc49d5400fb8a54dd3a82d44ecffd1fdd8ac3c677e8143a63671b1f1e1	-	ol8_aarch64_baseos_latest
	cockpit-bridge-310.10-1.0.1.el8_10.aarch64.rpm	00ddb1bc49d5400fb8a54dd3a82d44ecffd1fdd8ac3c677e8143a63671b1f1e1	-	ol8_aarch64_u10_baseos_patch
	cockpit-doc-310.10-1.0.1.el8_10.noarch.rpm	0f0ab749ca65b6cddf56702eabe657df2b1892b5f3c6fd6ae890f36271f8430f	-	ol8_aarch64_baseos_latest
	cockpit-doc-310.10-1.0.1.el8_10.noarch.rpm	0f0ab749ca65b6cddf56702eabe657df2b1892b5f3c6fd6ae890f36271f8430f	-	ol8_aarch64_u10_baseos_patch
	cockpit-system-310.10-1.0.1.el8_10.noarch.rpm	0ad1497651994934eddcc0b86052a54eeca9b0956cd8b7435dfe0199a60443f0	-	ol8_aarch64_baseos_latest
	cockpit-system-310.10-1.0.1.el8_10.noarch.rpm	0ad1497651994934eddcc0b86052a54eeca9b0956cd8b7435dfe0199a60443f0	-	ol8_aarch64_u10_baseos_patch
	cockpit-ws-310.10-1.0.1.el8_10.aarch64.rpm	a8bcf3d9945e50ea218939f3f3f04a84dba9c37983aa8bb6e0ada7702c2dfd7f	-	ol8_aarch64_baseos_latest
	cockpit-ws-310.10-1.0.1.el8_10.aarch64.rpm	a8bcf3d9945e50ea218939f3f3f04a84dba9c37983aa8bb6e0ada7702c2dfd7f	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	cockpit-310.10-1.0.1.el8_10.src.rpm	a1f0b988ffaece80524d8272671b41f0cc71c434e654c252b93660dbd718f003	-	ol8_x86_64_baseos_latest
	cockpit-310.10-1.0.1.el8_10.src.rpm	a1f0b988ffaece80524d8272671b41f0cc71c434e654c252b93660dbd718f003	-	ol8_x86_64_u10_baseos_patch
	cockpit-310.10-1.0.1.el8_10.x86_64.rpm	8ab0bda41ba6a846f9afec5e1fe0a5c921b2be5f3e2f661f2fea6f4746298f0d	-	ol8_x86_64_baseos_latest
	cockpit-310.10-1.0.1.el8_10.x86_64.rpm	8ab0bda41ba6a846f9afec5e1fe0a5c921b2be5f3e2f661f2fea6f4746298f0d	-	ol8_x86_64_u10_baseos_patch
	cockpit-bridge-310.10-1.0.1.el8_10.x86_64.rpm	d51de7ca99dea0210fe0b11123c7f66436ff890c979d17ef26e334d42c51b969	-	ol8_x86_64_baseos_latest
	cockpit-bridge-310.10-1.0.1.el8_10.x86_64.rpm	d51de7ca99dea0210fe0b11123c7f66436ff890c979d17ef26e334d42c51b969	-	ol8_x86_64_u10_baseos_patch
	cockpit-doc-310.10-1.0.1.el8_10.noarch.rpm	0f0ab749ca65b6cddf56702eabe657df2b1892b5f3c6fd6ae890f36271f8430f	-	ol8_x86_64_baseos_latest
	cockpit-doc-310.10-1.0.1.el8_10.noarch.rpm	0f0ab749ca65b6cddf56702eabe657df2b1892b5f3c6fd6ae890f36271f8430f	-	ol8_x86_64_u10_baseos_patch
	cockpit-system-310.10-1.0.1.el8_10.noarch.rpm	0ad1497651994934eddcc0b86052a54eeca9b0956cd8b7435dfe0199a60443f0	-	ol8_x86_64_baseos_latest
	cockpit-system-310.10-1.0.1.el8_10.noarch.rpm	0ad1497651994934eddcc0b86052a54eeca9b0956cd8b7435dfe0199a60443f0	-	ol8_x86_64_u10_baseos_patch
	cockpit-ws-310.10-1.0.1.el8_10.x86_64.rpm	1c28ef325016d31f82a210c7030a3fcf8a942b07617ade6af9cb9fcf7c1e1aab	-	ol8_x86_64_baseos_latest
	cockpit-ws-310.10-1.0.1.el8_10.x86_64.rpm	1c28ef325016d31f82a210c7030a3fcf8a942b07617ade6af9cb9fcf7c1e1aab	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team