ALSA-2026:7384

Details

Cockpit enables users to administer GNU/Linux servers using a web browser. It
offers network configuration, log inspection, diagnostic reports, SELinux
troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Affected Packages

cockpit

AlmaLinux 9

Fixed in:

344-2.el9_7

cockpit-bridge

AlmaLinux 9

Fixed in:

344-2.el9_7

cockpit-doc

AlmaLinux 9

Fixed in:

344-2.el9_7

cockpit-system

AlmaLinux 9

Fixed in:

344-2.el9_7

cockpit-ws

AlmaLinux 9

Fixed in:

344-2.el9_7

cockpit-ws-selinux

AlmaLinux 9

Fixed in:

344-2.el9_7

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:7384

ADVISORY

https://errata.almalinux.org/9/ALSA-2026-7384.html