ELSA-2026-94533

ELSA-2026-94533 - cockpit security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-03

Description

[356.4-1.0.1]
- Apply the patch for duplicate reference [Orabug: 39250109]
- Storage: Enable btrfs support [Orabug: 37464632]
- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
- Remove duplicate reference to server in cockpit [Orabug: 34030494]
- Update documentation links [Orabug: 30271413], [Orabug: 32013095],
[Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
- Update spec file for new release

[356.4]
- Remove recommends on subscription-manager-cockpit if applicable

[356.4-1]
- ws: Free language string also when it comes from the cookie (RHEL-244637) [CVE-2026-76235]
- ws: don't crash when urlroot has no trailing slash (RHEL-262905) [CVE-2026-91147]
- tls: Limit concurrent connections (RHEL-263074) [CVE-2026-91149]

Related CVEs

CVE-2026-76235

CVE-2026-91147

CVE-2026-91149

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	cockpit-356.4-1.0.1.el9_8.src.rpm	a54adef46a6e65fae31c65c3be15123b04ff92322755adfc98cd9ad03024abde	-	ol9_aarch64_appstream
	cockpit-356.4-1.0.1.el9_8.src.rpm	a54adef46a6e65fae31c65c3be15123b04ff92322755adfc98cd9ad03024abde	-	ol9_aarch64_baseos_latest
	cockpit-356.4-1.0.1.el9_8.src.rpm	a54adef46a6e65fae31c65c3be15123b04ff92322755adfc98cd9ad03024abde	-	ol9_aarch64_u8_baseos_patch
	cockpit-356.4-1.0.1.el9_8.aarch64.rpm	d28d1e634441175eef5ddb85eb81934bbf9738a1fa12280f18dd5114dab51d9f	-	ol9_aarch64_baseos_latest
	cockpit-356.4-1.0.1.el9_8.aarch64.rpm	d28d1e634441175eef5ddb85eb81934bbf9738a1fa12280f18dd5114dab51d9f	-	ol9_aarch64_u8_baseos_patch
	cockpit-bridge-356.4-1.0.1.el9_8.noarch.rpm	fd23e89529d0c3ffe60fcbc32b512ee53adce2dfe0761556d9516ff7c2c53a9d	-	ol9_aarch64_baseos_latest
	cockpit-bridge-356.4-1.0.1.el9_8.noarch.rpm	fd23e89529d0c3ffe60fcbc32b512ee53adce2dfe0761556d9516ff7c2c53a9d	-	ol9_aarch64_u8_baseos_patch
	cockpit-doc-356.4-1.0.1.el9_8.noarch.rpm	d43ea8fd7957158eb44592f5e215713eeb29475fa220028a5cf01aae81f4b70e	-	ol9_aarch64_baseos_latest
	cockpit-doc-356.4-1.0.1.el9_8.noarch.rpm	d43ea8fd7957158eb44592f5e215713eeb29475fa220028a5cf01aae81f4b70e	-	ol9_aarch64_u8_baseos_patch
	cockpit-packagekit-356.4-1.0.1.el9_8.noarch.rpm	3edd206a5013b995895e9ae7753b6a851d15ed75bad8b7e5088fcb88d222fe36	-	ol9_aarch64_appstream
	cockpit-storaged-356.4-1.0.1.el9_8.noarch.rpm	0ed69626fc8f7f54c12a09fb33f18e6a994e358b22759d0ee5144fbfaf6e265b	-	ol9_aarch64_appstream
	cockpit-system-356.4-1.0.1.el9_8.noarch.rpm	cb40e696cb90f3235e94f9f57733c96d72be98bc04c12fa20f0fb36d93d45ebd	-	ol9_aarch64_baseos_latest
	cockpit-system-356.4-1.0.1.el9_8.noarch.rpm	cb40e696cb90f3235e94f9f57733c96d72be98bc04c12fa20f0fb36d93d45ebd	-	ol9_aarch64_u8_baseos_patch
	cockpit-ws-356.4-1.0.1.el9_8.aarch64.rpm	9f4b317c2dc6ee6883f8e8196e00c5a1e8b4e38edd642a6ee35152a1e17b7f75	-	ol9_aarch64_baseos_latest
	cockpit-ws-356.4-1.0.1.el9_8.aarch64.rpm	9f4b317c2dc6ee6883f8e8196e00c5a1e8b4e38edd642a6ee35152a1e17b7f75	-	ol9_aarch64_u8_baseos_patch
	cockpit-ws-selinux-356.4-1.0.1.el9_8.aarch64.rpm	43c770e967622ac9da412c25028800dc1aa608569a5f018213cdbc406900b062	-	ol9_aarch64_baseos_latest
	cockpit-ws-selinux-356.4-1.0.1.el9_8.aarch64.rpm	43c770e967622ac9da412c25028800dc1aa608569a5f018213cdbc406900b062	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	cockpit-356.4-1.0.1.el9_8.src.rpm	a54adef46a6e65fae31c65c3be15123b04ff92322755adfc98cd9ad03024abde	-	ol9_x86_64_appstream
	cockpit-356.4-1.0.1.el9_8.src.rpm	a54adef46a6e65fae31c65c3be15123b04ff92322755adfc98cd9ad03024abde	-	ol9_x86_64_baseos_latest
	cockpit-356.4-1.0.1.el9_8.src.rpm	a54adef46a6e65fae31c65c3be15123b04ff92322755adfc98cd9ad03024abde	-	ol9_x86_64_u8_baseos_patch
	cockpit-356.4-1.0.1.el9_8.x86_64.rpm	44e6f5021ddd3ba504eda097c27d77f9d4499624bda697af2c28f8c7a640c48b	-	ol9_x86_64_baseos_latest
	cockpit-356.4-1.0.1.el9_8.x86_64.rpm	44e6f5021ddd3ba504eda097c27d77f9d4499624bda697af2c28f8c7a640c48b	-	ol9_x86_64_u8_baseos_patch
	cockpit-bridge-356.4-1.0.1.el9_8.noarch.rpm	fd23e89529d0c3ffe60fcbc32b512ee53adce2dfe0761556d9516ff7c2c53a9d	-	ol9_x86_64_baseos_latest
	cockpit-bridge-356.4-1.0.1.el9_8.noarch.rpm	fd23e89529d0c3ffe60fcbc32b512ee53adce2dfe0761556d9516ff7c2c53a9d	-	ol9_x86_64_u8_baseos_patch
	cockpit-doc-356.4-1.0.1.el9_8.noarch.rpm	d43ea8fd7957158eb44592f5e215713eeb29475fa220028a5cf01aae81f4b70e	-	ol9_x86_64_baseos_latest
	cockpit-doc-356.4-1.0.1.el9_8.noarch.rpm	d43ea8fd7957158eb44592f5e215713eeb29475fa220028a5cf01aae81f4b70e	-	ol9_x86_64_u8_baseos_patch
	cockpit-packagekit-356.4-1.0.1.el9_8.noarch.rpm	3edd206a5013b995895e9ae7753b6a851d15ed75bad8b7e5088fcb88d222fe36	-	ol9_x86_64_appstream
	cockpit-storaged-356.4-1.0.1.el9_8.noarch.rpm	0ed69626fc8f7f54c12a09fb33f18e6a994e358b22759d0ee5144fbfaf6e265b	-	ol9_x86_64_appstream
	cockpit-system-356.4-1.0.1.el9_8.noarch.rpm	cb40e696cb90f3235e94f9f57733c96d72be98bc04c12fa20f0fb36d93d45ebd	-	ol9_x86_64_baseos_latest
	cockpit-system-356.4-1.0.1.el9_8.noarch.rpm	cb40e696cb90f3235e94f9f57733c96d72be98bc04c12fa20f0fb36d93d45ebd	-	ol9_x86_64_u8_baseos_patch
	cockpit-ws-356.4-1.0.1.el9_8.x86_64.rpm	99c6c6991fffbbbb3aa84dd47e3d3b63f3a54bfbc864ab4a9f08881760729070	-	ol9_x86_64_baseos_latest
	cockpit-ws-356.4-1.0.1.el9_8.x86_64.rpm	99c6c6991fffbbbb3aa84dd47e3d3b63f3a54bfbc864ab4a9f08881760729070	-	ol9_x86_64_u8_baseos_patch
	cockpit-ws-selinux-356.4-1.0.1.el9_8.x86_64.rpm	0b8cf62c319e5ea4179a6225a3698dd010ea7f924341e61e27e87376773ff375	-	ol9_x86_64_baseos_latest
	cockpit-ws-selinux-356.4-1.0.1.el9_8.x86_64.rpm	0b8cf62c319e5ea4179a6225a3698dd010ea7f924341e61e27e87376773ff375	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team