[Git][security-tracker-team/security-tracker][master] Add CVE-2026-91148/cockpit

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 2 15:41:41 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f58fd7be by Salvatore Bonaccorso at 2026-10-02T16:41:15+02:00
Add CVE-2026-91148/cockpit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16150,6 +16150,9 @@ CVE-2026-91149 (A flaw was found in Cockpit. An unauthenticated remote attacker
 	[trixie] - cockpit <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2479422
 	NOTE: https://github.com/cockpit-project/cockpit/commit/e12c37897d5a8efb41c65ca95064930e256d562e (368)
+CVE-2026-91148
+	- cockpit 368-1
+	NOTE: https://github.com/cockpit-project/cockpit/commit/6e76c96272a4ebcb085c948e5cc9189eeee561af (368)
 CVE-2026-91147 (A flaw was found in `cockpit-ws`. This vulnerability allows a remote,  ...)
 	- cockpit 368-1
 	[trixie] - cockpit <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f58fd7beda7f46a4e5813c5a7a61b60135794537

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f58fd7beda7f46a4e5813c5a7a61b60135794537
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/66af9013/attachment.htm>


More information about the debian-security-tracker-commits mailing list