ELSA-2026-7384: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection (CRITICAL)

Oracle Errata System Oracle Linux 5.11 2026-04-10T22:21:39 ELSA-2026-7384: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection (CRITICAL) Oracle Linux 9 [344-2.0.1] - Storage: Enable btrfs support [Orabug: 37464632] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation links [Orabug: 30271413], [Orabug: 32013095], [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273] - Update spec file for new release [344] - Remove recommends on subscription-manager-cockpit if applicable * Fri Mar 27 2026 Jelle van der Waa <jvanderw@redhat.com - 344-2 - ws: be more explicit when handling hostnames on cli (CVE-2026-4631) CRITICAL Copyright 2026 Oracle, Inc. CVE-2026-4631 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:7:baseos_patch cpe:/o:oracle:linux:9::baseos_latest