elsa-2026-7384
oracle_linux[344-2.0.1] - Storage: Enable btrfs support [Orabug: 37464632] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation links [Orabug: 30271413], [Orabug: 32013095], [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273] - Update spec file for new release [344] - Remove recommends on subscription-manager-cockpit if applicable * Fri Mar 27 2026 Jelle van der Waa jvanderw@redhat.com - 344-2 - ws: be more explicit when handling hostnames on cli (CVE-2026-4631)
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2026-4631"
],
"cvss": 0.0,
"database_specific": {
"severity": "CRITICAL"
},
"description": "[344-2.0.1]\n- Storage: Enable btrfs support [Orabug: 37464632]\n- Replaced upstream urls in documentation with oracle links [Orabug: 36528753]\n- Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]\n- Remove duplicate reference to server in cockpit [Orabug: 34030494]\n- Update documentation links [Orabug: 30271413], [Orabug: 32013095],\n [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]\n- Update spec file for new release\n\n[344]\n- Remove recommends on subscription-manager-cockpit if applicable\n\n* Fri Mar 27 2026 Jelle van der Waa jvanderw@redhat.com - 344-2\n- ws: be more explicit when handling hostnames on cli (CVE-2026-4631)",
"id": "ELSA-2026-7384",
"ovalId": "oval:com.oracle.elsa:def:20267384",
"source": "oracle_linux",
"title": "ELSA-2026-7384: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection (CRITICAL)",
"url": "https://linux.oracle.com/errata/ELSA-2026-7384.html"
}