openSUSE-SU-2026:20523-1
Security update for cockpit
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 16.0 | cockpit, cockpit-bridge, cockpit-devel und 10 weitere | 354-160000.3.1 |
Alle 13 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 16.0 | cockpit | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-bridge | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-devel | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-doc | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-firewalld | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-kdump | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-networkmanager | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-packagekit | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-selinux | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-storaged | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-system | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-ws | 354-160000.3.1 |
| openSUSE Leap 16.0 | cockpit-ws-selinux | 354-160000.3.1 |