RHSA-2024:3843 — Security Advisory

Red Hat Security Advisory: cockpit security update

Loading…

Severity

Moderate

Red Hat Product Security

RHEL 9

Products

Official CSAF product identity

Published · June 12, 2024

Updated · June 25, 2026

Topic

An update for cockpit is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

  • cockpit: command injection when deleting a sosreport with a crafted name (CVE-2024-2947)

Related CVEs

RHSA-2024:3843 — Red Hat Security Advisory: cockpit security update | PulseLinux