ALSA-2026:7383

Details

Cockpit enables users to administer GNU/Linux servers using a web browser. It
offers network configuration, log inspection, diagnostic reports, SELinux
troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Affected Packages

cockpit

AlmaLinux 10

Fixed in:

344-3.el10_1

cockpit-bridge

AlmaLinux 10

Fixed in:

344-3.el10_1

cockpit-doc

AlmaLinux 10

Fixed in:

344-3.el10_1

cockpit-system

AlmaLinux 10

Fixed in:

344-3.el10_1

cockpit-ws

AlmaLinux 10

Fixed in:

344-3.el10_1

cockpit-ws-selinux

AlmaLinux 10

Fixed in:

344-3.el10_1

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:7383

ADVISORY

https://errata.almalinux.org/10/ALSA-2026-7383.html