RLSA-2026:96250 Important: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root...

cockpit security update

An update is available for cockpit. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. I...

cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws c...

Important: Red Hat Security Advisory: cockpit security update

An update for cockpit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service...

MiracleLinux 8 : cockpit-310.10-1.el8_10.ML.1 (AXSA:2026-2273:17)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2273:17 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit-ws: cockpit: cockpit-ws:...

AlmaLinux 9.2 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793953225)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793953225 advisory. - A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that...

MiracleLinux 9 : cockpit-356.4-1.el9_8.ML.1 (AXSA:2026-2267:16)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2267:16 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit: Cockpit: Denial of Servi...

Unity Linux 20.1070a Security Update: cockpit (UTSA-2026-150344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150344 advisory. A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowi...

Rocky Linux 8 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc Multiple Vulnerabilities (crlsa-2026_94485)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202694485 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit-ws: cockpit: cockpit-ws:...

Rocky Linux 9 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc Multiple Vulnerabilities (crlsa-2026_94533)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202694533 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit: Cockpit: Denial of Service via...

cockpit security update

An update is available for cockpit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...

RLSA-2026:94533 Important: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root...

RLSA-2026:94485 Moderate: cockpit security, bug fix, and enhancement update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root...

cockpit security, bug fix, and enhancement update

An update is available for cockpit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...

RockyLinux 9 : cockpit (RLSA-2026:94533)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94533 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit: Cockpit: Denial of Service v...

RockyLinux 8 : cockpit (RLSA-2026:94485)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94485 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit-ws: cockpit: cockpit-ws:...

AlmaLinux 8 : cockpit (ALSA-2026:94485)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:94485 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit-ws: cockpit: cockpit-ws:...

cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws c...

cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service...