{"cves":["CVE-2026-4802"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[356.2-1.0.1]\n- Apply the patch for duplicate reference [Orabug: 39250109]\n- Storage: Enable btrfs support [Orabug: 37464632]\n- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]\n- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]\n- Remove duplicate reference to server in cockpit [Orabug: 34030494]\n- Update documentation links [Orabug: 30271413], [Orabug: 32013095],\n  [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]\n- Update spec file for new release\n\n[356.2]\n- Remove recommends on subscription-manager-cockpit if applicable\n\n[356.1-1]\n- ws: Prevent remote code execution with SSH argument injection (RHEL-158310)\n- node: update lodash dependency (RHEL-164196)","id":"ELSA-2026-21468","ovalId":"oval:com.oracle.elsa:def:202621468","source":"oracle_linux","title":"ELSA-2026-21468:  cockpit security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-21468.html"}