OPENSUSE-SU-2026:21399-1
Vulnerability from csaf_opensuse - Published: 2026-07-21 15:45 - Updated: 2026-09-16 21:44Summary
Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions
Severity
Critical
Notes
Title of the patch: Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions
Description of the patch: This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues:
Security issues fixed:
- CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from
global prototypes (bsc#1257325).
- CVE-2026-4631: SSH command-line argument injection can lead to unauthenticated remote code execution (bsc#1261829).
- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and
may crash a Node.js process (bsc#1257836 bsc#1257838 bsc#1257840).
- CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character
that doesn't appear in the test string (bsc#1258637 bsc#1258640 bsc#1258641).
- CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential backtracking
complexity and a ReDoS (bsc#1259010 bsc#1259013 bsc#1259015).
Non security issues fixed:
- cockpit webUI - 'Software updates - install all updates' got an unexpected internal error (bsc#1259210).
- cockpit-machines does not work out of the box, missing libvirt daemon (bsc#1236149).
Changes for cockpit:
- Update to 364.
- Update to 361 (jsc#PED-15706/jsc#CPT-183):
* Remove all "Mount" actions in Anaconda mode
* Dependency updates
- Update to 360:
* ws: be more explicit when handling hostnames on cli bsc#1261829/CVE-2026-4631
* ws: support loading a custom login page
- Update to 358:
* Networking: Add Wi-Fi support
* Cockpit Client updated to GTK 4
* Bugfixes and translation updates
- Update to 357:
* lib: Use browser context menu on shift
* bridge: support Python 3.14 on old kernels (RHEL 8)
- Update to 356:
* systemd: Allow editing timers created by Cockpit
* Convert license headers to SPDX format
- Update to 355:
* ws: Remove obsolete pam_cockpit_cert module
* shell: add StartTransientUnit as a sudo alternative
Changes for cockpit-machines:
- Update to 354.
- Update to 352:
- Improvements to the "Add disk" and "Create Volume" dialogs.
- Update suse_version requirement to function with the planned bump (jsc#PED-15820).
- Drop explict dependency on libvirt (bsc#1258040, bsc#1236149).
- Update to 348:
* Translation updates
* Convert license headers to SPDX format
* Now requires cockpit-devel 356 due to the replacement of xterm/addon-canvas with xterm/addon-webgl
- Update to 347:
* Bug fixes and translation updates
- Fix esbuild for ppc64le (bsc#1257698).
Changes for cockpit-packages:
- Update to version 5:
* Support transactional systems
* Improve error/success messages
* Translation updates
- Patch esbuild to use native runtime on ppc64 (bsc#1257698).
Changes for cockpit-podman:
- Update to 128.
- Fix esbuild for ppc64le (bsc#1257698).
Changes for cockpit-repos:
- Update to 4.8.
- Patch esbuild to use native runtime on ppc64 (bsc#1257698).
Changes for cockpit-subscriptions:
- Update to version 16.2 (bsc#1257033).
- Patch esbuild to use native runtime on ppc64 (bsc#1257698).
Patchnames: openSUSE-Leap-16.0-1309
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.2 (High)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
30 products, the same list as for
CVE-2025-13465
Threats
Impact
important
7.5 (High)
Affected products
Recommended
30 products, the same list as for
CVE-2025-13465
Threats
Impact
important
7.5 (High)
Affected products
Recommended
30 products, the same list as for
CVE-2025-13465
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
30 products, the same list as for
CVE-2025-13465
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
30 products, the same list as for
CVE-2025-13465
Threats
Impact
important
References
37 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from\n global prototypes (bsc#1257325).\n- CVE-2026-4631: SSH command-line argument injection can lead to unauthenticated remote code execution (bsc#1261829).\n- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and\n may crash a Node.js process (bsc#1257836 bsc#1257838 bsc#1257840).\n- CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character\n that doesn\u0027t appear in the test string (bsc#1258637 bsc#1258640 bsc#1258641).\n- CVE-2026-27904: minimatch: nested *() extglobs can lead to regular expressions with exponential backtracking\n complexity and a ReDoS (bsc#1259010 bsc#1259013 bsc#1259015).\n\nNon security issues fixed:\n\n- cockpit webUI - \u0027Software updates - install all updates\u0027 got an unexpected internal error (bsc#1259210).\n- cockpit-machines does not work out of the box, missing libvirt daemon (bsc#1236149).\n\nChanges for cockpit:\n\n- Update to 364.\n\n- Update to 361 (jsc#PED-15706/jsc#CPT-183):\n\n * Remove all \"Mount\" actions in Anaconda mode\n * Dependency updates\n\n- Update to 360:\n * ws: be more explicit when handling hostnames on cli bsc#1261829/CVE-2026-4631\n * ws: support loading a custom login page\n\n- Update to 358:\n\n * Networking: Add Wi-Fi support\n * Cockpit Client updated to GTK 4\n * Bugfixes and translation updates\n\n- Update to 357:\n\n * lib: Use browser context menu on shift\n * bridge: support Python 3.14 on old kernels (RHEL 8)\n\n- Update to 356:\n\n * systemd: Allow editing timers created by Cockpit\n * Convert license headers to SPDX format\n\n- Update to 355:\n\n * ws: Remove obsolete pam_cockpit_cert module\n * shell: add StartTransientUnit as a sudo alternative\n\nChanges for cockpit-machines:\n\n- Update to 354.\n\n- Update to 352:\n\n - Improvements to the \"Add disk\" and \"Create Volume\" dialogs.\n\n- Update suse_version requirement to function with the planned bump (jsc#PED-15820).\n- Drop explict dependency on libvirt (bsc#1258040, bsc#1236149).\n\n- Update to 348:\n\n * Translation updates\n * Convert license headers to SPDX format\n * Now requires cockpit-devel 356 due to the replacement of xterm/addon-canvas with xterm/addon-webgl\n\n- Update to 347:\n * Bug fixes and translation updates\n\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-packages:\n\n- Update to version 5:\n\n * Support transactional systems\n * Improve error/success messages\n * Translation updates\n\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-podman:\n\n- Update to 128.\n- Fix esbuild for ppc64le (bsc#1257698).\n\nChanges for cockpit-repos:\n\n- Update to 4.8.\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n\nChanges for cockpit-subscriptions:\n\n- Update to version 16.2 (bsc#1257033).\n- Patch esbuild to use native runtime on ppc64 (bsc#1257698).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1309",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21399-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1236149",
"url": "https://bugzilla.suse.com/1236149"
},
{
"category": "self",
"summary": "SUSE Bug 1257033",
"url": "https://bugzilla.suse.com/1257033"
},
{
"category": "self",
"summary": "SUSE Bug 1257325",
"url": "https://bugzilla.suse.com/1257325"
},
{
"category": "self",
"summary": "SUSE Bug 1257698",
"url": "https://bugzilla.suse.com/1257698"
},
{
"category": "self",
"summary": "SUSE Bug 1257836",
"url": "https://bugzilla.suse.com/1257836"
},
{
"category": "self",
"summary": "SUSE Bug 1257838",
"url": "https://bugzilla.suse.com/1257838"
},
{
"category": "self",
"summary": "SUSE Bug 1257840",
"url": "https://bugzilla.suse.com/1257840"
},
{
"category": "self",
"summary": "SUSE Bug 1258040",
"url": "https://bugzilla.suse.com/1258040"
},
{
"category": "self",
"summary": "SUSE Bug 1258637",
"url": "https://bugzilla.suse.com/1258637"
},
{
"category": "self",
"summary": "SUSE Bug 1258640",
"url": "https://bugzilla.suse.com/1258640"
},
{
"category": "self",
"summary": "SUSE Bug 1258641",
"url": "https://bugzilla.suse.com/1258641"
},
{
"category": "self",
"summary": "SUSE Bug 1259010",
"url": "https://bugzilla.suse.com/1259010"
},
{
"category": "self",
"summary": "SUSE Bug 1259013",
"url": "https://bugzilla.suse.com/1259013"
},
{
"category": "self",
"summary": "SUSE Bug 1259015",
"url": "https://bugzilla.suse.com/1259015"
},
{
"category": "self",
"summary": "SUSE Bug 1259210",
"url": "https://bugzilla.suse.com/1259210"
},
{
"category": "self",
"summary": "SUSE Bug 1259774",
"url": "https://bugzilla.suse.com/1259774"
},
{
"category": "self",
"summary": "SUSE Bug 1261829",
"url": "https://bugzilla.suse.com/1261829"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-13465 page",
"url": "https://www.suse.com/security/cve/CVE-2025-13465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25547 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-26996 page",
"url": "https://www.suse.com/security/cve/CVE-2026-26996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4631 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4802 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4802/"
}
],
"title": "Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions",
"tracking": {
"current_release_date": "2026-09-16T21:44:32Z",
"generator": {
"date": "2026-07-21T15:45:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21399-1",
"initial_release_date": "2026-07-21T15:45:48Z",
"revision_history": [
{
"date": "2026-07-21T15:45:48Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:42:47Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:44:32Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cockpit-364-160000.1.1.aarch64",
"product": {
"name": "cockpit-364-160000.1.1.aarch64",
"product_id": "cockpit-364-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit@364-160000.1.1?arch=aarch64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-devel-364-160000.1.1.aarch64",
"product": {
"name": "cockpit-devel-364-160000.1.1.aarch64",
"product_id": "cockpit-devel-364-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-devel@364-160000.1.1?arch=aarch64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-364-160000.1.1.aarch64",
"product": {
"name": "cockpit-ws-364-160000.1.1.aarch64",
"product_id": "cockpit-ws-364-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws@364-160000.1.1?arch=aarch64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-selinux-364-160000.1.1.aarch64",
"product": {
"name": "cockpit-ws-selinux-364-160000.1.1.aarch64",
"product_id": "cockpit-ws-selinux-364-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws-selinux@364-160000.1.1?arch=aarch64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-bridge-364-160000.1.1.noarch",
"product": {
"name": "cockpit-bridge-364-160000.1.1.noarch",
"product_id": "cockpit-bridge-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-bridge@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-doc-364-160000.1.1.noarch",
"product": {
"name": "cockpit-doc-364-160000.1.1.noarch",
"product_id": "cockpit-doc-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-doc@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-firewalld-364-160000.1.1.noarch",
"product": {
"name": "cockpit-firewalld-364-160000.1.1.noarch",
"product_id": "cockpit-firewalld-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-firewalld@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-kdump-364-160000.1.1.noarch",
"product": {
"name": "cockpit-kdump-364-160000.1.1.noarch",
"product_id": "cockpit-kdump-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-kdump@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-machines-354-160000.1.1.noarch",
"product": {
"name": "cockpit-machines-354-160000.1.1.noarch",
"product_id": "cockpit-machines-354-160000.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cockpit-machines@354-160000.1.1?arch=noarch\u0026upstream=cockpit-machines-354-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-networkmanager-364-160000.1.1.noarch",
"product": {
"name": "cockpit-networkmanager-364-160000.1.1.noarch",
"product_id": "cockpit-networkmanager-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-networkmanager@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-packagekit-364-160000.1.1.noarch",
"product": {
"name": "cockpit-packagekit-364-160000.1.1.noarch",
"product_id": "cockpit-packagekit-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-packagekit@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-packages-5-160000.1.1.noarch",
"product": {
"name": "cockpit-packages-5-160000.1.1.noarch",
"product_id": "cockpit-packages-5-160000.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cockpit-packages@5-160000.1.1?arch=noarch\u0026upstream=cockpit-packages-5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-podman-128-160000.1.1.noarch",
"product": {
"name": "cockpit-podman-128-160000.1.1.noarch",
"product_id": "cockpit-podman-128-160000.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cockpit-podman@128-160000.1.1?arch=noarch\u0026upstream=cockpit-podman-128-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-repos-4.8-160000.1.1.noarch",
"product": {
"name": "cockpit-repos-4.8-160000.1.1.noarch",
"product_id": "cockpit-repos-4.8-160000.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cockpit-repos@4.8-160000.1.1?arch=noarch\u0026upstream=cockpit-repos-4.8-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-selinux-364-160000.1.1.noarch",
"product": {
"name": "cockpit-selinux-364-160000.1.1.noarch",
"product_id": "cockpit-selinux-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-selinux@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-storaged-364-160000.1.1.noarch",
"product": {
"name": "cockpit-storaged-364-160000.1.1.noarch",
"product_id": "cockpit-storaged-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-storaged@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-subscriptions-16.2-160000.1.1.noarch",
"product": {
"name": "cockpit-subscriptions-16.2-160000.1.1.noarch",
"product_id": "cockpit-subscriptions-16.2-160000.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cockpit-subscriptions@16.2-160000.1.1?arch=noarch\u0026upstream=cockpit-subscriptions-16.2-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-system-364-160000.1.1.noarch",
"product": {
"name": "cockpit-system-364-160000.1.1.noarch",
"product_id": "cockpit-system-364-160000.1.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-system@364-160000.1.1?arch=noarch\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-364-160000.1.1.ppc64le",
"product": {
"name": "cockpit-364-160000.1.1.ppc64le",
"product_id": "cockpit-364-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit@364-160000.1.1?arch=ppc64le\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-devel-364-160000.1.1.ppc64le",
"product": {
"name": "cockpit-devel-364-160000.1.1.ppc64le",
"product_id": "cockpit-devel-364-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-devel@364-160000.1.1?arch=ppc64le\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-364-160000.1.1.ppc64le",
"product": {
"name": "cockpit-ws-364-160000.1.1.ppc64le",
"product_id": "cockpit-ws-364-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws@364-160000.1.1?arch=ppc64le\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-selinux-364-160000.1.1.ppc64le",
"product": {
"name": "cockpit-ws-selinux-364-160000.1.1.ppc64le",
"product_id": "cockpit-ws-selinux-364-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws-selinux@364-160000.1.1?arch=ppc64le\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-364-160000.1.1.s390x",
"product": {
"name": "cockpit-364-160000.1.1.s390x",
"product_id": "cockpit-364-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit@364-160000.1.1?arch=s390x\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-devel-364-160000.1.1.s390x",
"product": {
"name": "cockpit-devel-364-160000.1.1.s390x",
"product_id": "cockpit-devel-364-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-devel@364-160000.1.1?arch=s390x\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-364-160000.1.1.s390x",
"product": {
"name": "cockpit-ws-364-160000.1.1.s390x",
"product_id": "cockpit-ws-364-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws@364-160000.1.1?arch=s390x\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-selinux-364-160000.1.1.s390x",
"product": {
"name": "cockpit-ws-selinux-364-160000.1.1.s390x",
"product_id": "cockpit-ws-selinux-364-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws-selinux@364-160000.1.1?arch=s390x\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-364-160000.1.1.x86_64",
"product": {
"name": "cockpit-364-160000.1.1.x86_64",
"product_id": "cockpit-364-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit@364-160000.1.1?arch=x86_64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-devel-364-160000.1.1.x86_64",
"product": {
"name": "cockpit-devel-364-160000.1.1.x86_64",
"product_id": "cockpit-devel-364-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-devel@364-160000.1.1?arch=x86_64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-364-160000.1.1.x86_64",
"product": {
"name": "cockpit-ws-364-160000.1.1.x86_64",
"product_id": "cockpit-ws-364-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws@364-160000.1.1?arch=x86_64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cockpit-ws-selinux-364-160000.1.1.x86_64",
"product": {
"name": "cockpit-ws-selinux-364-160000.1.1.x86_64",
"product_id": "cockpit-ws-selinux-364-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:cockpit-project:cockpit:364:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cockpit-ws-selinux@364-160000.1.1?arch=x86_64\u0026upstream=cockpit-364-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-364-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64"
},
"product_reference": "cockpit-364-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-364-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le"
},
"product_reference": "cockpit-364-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-364-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x"
},
"product_reference": "cockpit-364-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-364-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64"
},
"product_reference": "cockpit-364-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-bridge-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch"
},
"product_reference": "cockpit-bridge-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-devel-364-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64"
},
"product_reference": "cockpit-devel-364-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-devel-364-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le"
},
"product_reference": "cockpit-devel-364-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-devel-364-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x"
},
"product_reference": "cockpit-devel-364-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-devel-364-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64"
},
"product_reference": "cockpit-devel-364-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-doc-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch"
},
"product_reference": "cockpit-doc-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-firewalld-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch"
},
"product_reference": "cockpit-firewalld-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-kdump-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch"
},
"product_reference": "cockpit-kdump-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-machines-354-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch"
},
"product_reference": "cockpit-machines-354-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-networkmanager-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch"
},
"product_reference": "cockpit-networkmanager-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-packagekit-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch"
},
"product_reference": "cockpit-packagekit-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-packages-5-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch"
},
"product_reference": "cockpit-packages-5-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-podman-128-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch"
},
"product_reference": "cockpit-podman-128-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-repos-4.8-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch"
},
"product_reference": "cockpit-repos-4.8-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-selinux-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch"
},
"product_reference": "cockpit-selinux-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-storaged-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch"
},
"product_reference": "cockpit-storaged-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-subscriptions-16.2-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch"
},
"product_reference": "cockpit-subscriptions-16.2-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-system-364-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch"
},
"product_reference": "cockpit-system-364-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-364-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64"
},
"product_reference": "cockpit-ws-364-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-364-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le"
},
"product_reference": "cockpit-ws-364-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-364-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x"
},
"product_reference": "cockpit-ws-364-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-364-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64"
},
"product_reference": "cockpit-ws-364-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-selinux-364-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64"
},
"product_reference": "cockpit-ws-selinux-364-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-selinux-364-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le"
},
"product_reference": "cockpit-ws-selinux-364-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-selinux-364-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x"
},
"product_reference": "cockpit-ws-selinux-364-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-selinux-364-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
},
"product_reference": "cockpit-ws-selinux-364-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-13465"
}
],
"notes": [
{
"category": "general",
"text": "Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.\n\nThe issue permits deletion of properties but does not allow overwriting their original behavior.\n\nThis issue is patched on 4.17.23",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-13465",
"url": "https://www.suse.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "SUSE Bug 1257321 for CVE-2025-13465",
"url": "https://bugzilla.suse.com/1257321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-21T15:45:48Z",
"details": "important"
}
],
"title": "CVE-2025-13465"
},
{
"cve": "CVE-2026-25547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25547"
}
],
"notes": [
{
"category": "general",
"text": "@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the expansion grows exponentially, even a small input can consume excessive CPU and memory and may crash the Node.js process. This issue has been patched in version 5.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25547",
"url": "https://www.suse.com/security/cve/CVE-2026-25547"
},
{
"category": "external",
"summary": "SUSE Bug 1257834 for CVE-2026-25547",
"url": "https://bugzilla.suse.com/1257834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-21T15:45:48Z",
"details": "important"
}
],
"title": "CVE-2026-25547"
},
{
"cve": "CVE-2026-26996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-26996"
}
],
"notes": [
{
"category": "general",
"text": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn\u0027t appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8\u0027s regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-26996",
"url": "https://www.suse.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "SUSE Bug 1258621 for CVE-2026-26996",
"url": "https://bugzilla.suse.com/1258621"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-21T15:45:48Z",
"details": "important"
}
],
"title": "CVE-2026-26996"
},
{
"cve": "CVE-2026-27904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27904"
}
],
"notes": [
{
"category": "general",
"text": "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27904",
"url": "https://www.suse.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "SUSE Bug 1258994 for CVE-2026-27904",
"url": "https://bugzilla.suse.com/1258994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-21T15:45:48Z",
"details": "important"
}
],
"title": "CVE-2026-27904"
},
{
"cve": "CVE-2026-4631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4631"
}
],
"notes": [
{
"category": "general",
"text": "Cockpit\u0027s remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4631",
"url": "https://www.suse.com/security/cve/CVE-2026-4631"
},
{
"category": "external",
"summary": "SUSE Bug 1261829 for CVE-2026-4631",
"url": "https://bugzilla.suse.com/1261829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-21T15:45:48Z",
"details": "critical"
}
],
"title": "CVE-2026-4631"
},
{
"cve": "CVE-2026-4802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4802"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4802",
"url": "https://www.suse.com/security/cve/CVE-2026-4802"
},
{
"category": "external",
"summary": "SUSE Bug 1265040 for CVE-2026-4802",
"url": "https://bugzilla.suse.com/1265040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:cockpit-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-bridge-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-devel-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-doc-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-firewalld-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-kdump-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-machines-354-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-networkmanager-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packagekit-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-packages-5-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-podman-128-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-repos-4.8-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-selinux-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-storaged-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-subscriptions-16.2-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-system-364-160000.1.1.noarch",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-364-160000.1.1.x86_64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.aarch64",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.ppc64le",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.s390x",
"openSUSE Leap 16.0:cockpit-ws-selinux-364-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-21T15:45:48Z",
"details": "important"
}
],
"title": "CVE-2026-4802"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…