Most recent entries from all

ALSA-2024:9325 — Low: cockpit security update

Affected: AlmaLinux:9: cockpit, AlmaLinux:9: cockpit-bridge, AlmaLinux:9: cockpit-doc, AlmaLinux:9: cockpit-packagekit, AlmaLinux:9: cockpit-pcp, AlmaLinux:9: cockpit-storaged, AlmaLinux:9: cockpit-system, AlmaLinux:9: cockpit-ws

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

* cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-12576

certfr-2025-avi-0855 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent…

certfr-2025-avi-0855

EUVD-2026-261625

fkie_cve-2024-6126

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

GHSA-g6h4-j28x-38g5

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

OESA-2024-1842 — cockpit security update

Affected: openEuler:22.03-LTS-SP3: cockpit, openEuler:20.03-LTS-SP4: cockpit, openEuler:24.03-LTS: cockpit, openEuler:22.03-LTS-SP4: cockpit, openEuler:22.03-LTS-SP1: cockpit

Cockpit makes GNU/Linux discoverable. See Linux server in a web browser and perform system tasks with a mouse. It’s easy to start containers, administer storage, configure networks, and inspect logs with this package.

Security Fix(es):

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.(CVE-2024-6126)

openSUSE-SU-2024:0206-1 — Security update for cockpit

Security update for cockpit

SUSE-SU-2024:2304-1 — Security update for cockpit

Security update for cockpit

UBUNTU-CVE-2024-6126

Affected: Ubuntu:18.04:LTS: cockpit, Ubuntu:20.04:LTS: cockpit, Ubuntu:22.04:LTS: cockpit, Ubuntu:24.04:LTS: cockpit

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

WID-SEC-W-2024-3409 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen preiszugeben und Daten zu manipulieren.