SUSE-SU-2026:20237-1

Details

This update for cockpit fixes the following issues:

CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).

Affected Packages

cockpit

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-bridge

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-firewalld

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-kdump

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-networkmanager

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-selinux

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-storaged

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-system

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-ws

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

cockpit-ws-selinux

SUSE Linux Micro 6.2

Fixed in:

340-160000.4.1

References

REPORT

https://bugzilla.suse.com/1257324

WEB

https://www.suse.com/security/cve/CVE-2025-13465

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-202620237-1/