{
  "cves": [
    "CVE-2026-76235",
    "CVE-2026-91147"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[310.10-1.0.1]\n- Fixed cockpit_ws_t selinux issue for tmpfs [Orabug: 36013589]\n- Move update-motd out of cockpit_ws_t context [Orabug: 36013589]\n- Update documentation links [Orabug: 34706402]\n- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]\n- Remove duplicate reference to server in cockpit [Orabug: 33862832]\n- Update documentation links [Orabug: 32795691]\n- Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]\n- Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]\n\n[310.10]\n- Remove recommends on subscription-manager-cockpit if applicable\n\n[310.10-1]\n- ws: don't crash when urlroot has no trailing slash (RHEL-262904) [CVE-2026-91147]\n- ws: Free language string also when it comes from the cookie (RHEL-244631) [CVE-2026-76235]\n- packagekit: Sanitize markdown urls [CVE-2026-91148]",
  "id": "ELSA-2026-94485",
  "ovalId": "oval:com.oracle.elsa:def:202694485",
  "source": "oracle_linux",
  "title": "ELSA-2026-94485:  cockpit security, bug fix, and enhancement update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-94485.html"
}