{"id":"CLSA-2026-1781091230","summary":"cockpit: Fix of 2 CVEs","details":"- CVE-2026-4802: fix shell command injection via boot descriptor query string in\n  the system logs page by quoting journalctl arguments using shlex-style single-\n  quote escaping\n\n- CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream\n  follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID","modified":"2026-10-26T09:43:58.332976575Z","published":"2026-10-06T17:11:01Z","upstream":["CVE-2024-6126","CVE-2026-4802"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781091230.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6126"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4802"}],"affected":[{"package":{"name":"cockpit","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-bridge","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-bridge?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-doc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-doc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-packagekit","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-packagekit?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-pcp","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-pcp?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-storaged","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-storaged?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-system","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-system?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-tests","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-tests?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}},{"package":{"name":"cockpit-ws","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cockpit-ws?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781091230.json"}}],"schema_version":"1.9.0"}