elsa-2026-94533

oracle_linux
Description

[356.4-1.0.1] - Apply the patch for duplicate reference [Orabug: 39250109] - Storage: Enable btrfs support [Orabug: 37464632] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation links [Orabug: 30271413], [Orabug: 32013095], [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273] - Update spec file for new release [356.4] - Remove recommends on subscription-manager-cockpit if applicable [356.4-1] - ws: Free language string also when it comes from the cookie (RHEL-244637) [CVE-2026-76235] - ws: don't crash when urlroot has no trailing slash (RHEL-262905) [CVE-2026-91147] - tls: Limit concurrent connections (RHEL-263074) [CVE-2026-91149]

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-76235",
    "CVE-2026-91147",
    "CVE-2026-91149"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[356.4-1.0.1]\n- Apply the patch for duplicate reference [Orabug: 39250109]\n- Storage: Enable btrfs support [Orabug: 37464632]\n- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]\n- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]\n- Remove duplicate reference to server in cockpit [Orabug: 34030494]\n- Update documentation links [Orabug: 30271413], [Orabug: 32013095],\n  [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]\n- Update spec file for new release\n\n[356.4]\n- Remove recommends on subscription-manager-cockpit if applicable\n\n[356.4-1]\n- ws: Free language string also when it comes from the cookie (RHEL-244637) [CVE-2026-76235]\n- ws: don't crash when urlroot has no trailing slash (RHEL-262905) [CVE-2026-91147]\n- tls: Limit concurrent connections (RHEL-263074) [CVE-2026-91149]",
  "id": "ELSA-2026-94533",
  "ovalId": "oval:com.oracle.elsa:def:202694533",
  "source": "oracle_linux",
  "title": "ELSA-2026-94533:  cockpit security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-94533.html"
}
View JSON API Download JSON