MGASA-2026-0408
- Source
- https://advisories.mageia.org/MGASA-2026-0408.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0408.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2026-0408
- Upstream
- Published
- 2026-09-16T15:40:01Z
- Modified
- 2026-09-16T15:45:03Z
- Summary
- Updated cockpit packages fix a security vulnerability
- Details
-
Cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html. (CVE-2026-76235)
- References
-
- https://advisories.mageia.org/MGASA-2026-0408.html
- https://bugs.mageia.org/show_bug.cgi?id=36207
- https://lists.debian.org/debian-security-announce/2026/msg00385.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2519497
- https://github.com/cockpit-project/cockpit/pull/23633
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KV2ED2IAJAGOAIPNS3HQS7G4KHJANP3C/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / cockpit
Package
- Name
- cockpit
- Purl
- pkg:rpm/mageia/cockpit?arch=source&distro=mageia-10
Mageia:9 / cockpit
Package
- Name
- cockpit
- Purl
- pkg:rpm/mageia/cockpit?arch=source&distro=mageia-9