cockpit-310.8-1.el8_10.ML.1

エラータID: AXSA:2026-750:04

リリース日: 
2026/06/03 Wednesday - 10:24
題名: 
cockpit-310.8-1.el8_10.ML.1
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- Cockpit には、リモートの攻撃者により、任意のコードの実行を可能
とする脆弱性が存在します。(CVE-2026-4802)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-4802
A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. cockpit-310.8-1.el8_10.ML.1.src.rpm
    MD5: 83a728f10f4875026b274fe95174036d
    SHA-256: 2ecc2239efaa8bfa031fe227ea4a2311df5cf76df5569769c49989c4f9a42a6e
    Size: 13.92 MB

Asianux Server 8 for x86_64
  1. cockpit-310.8-1.el8_10.ML.1.x86_64.rpm
    MD5: 9d3e26796527936bd930a935ffbd2425
    SHA-256: 9957141b8f8ac4fcfd02e788579ed0d59fa89532aea266ed641905a9eb7607a5
    Size: 90.08 kB
  2. cockpit-bridge-310.8-1.el8_10.ML.1.x86_64.rpm
    MD5: 02db2cfaa86ea59ef1fc7f88dc3b8648
    SHA-256: 104b5ca01936a0c1db56c38e0d92536f728b4ea7f5ec4333eee9242c6a772c22
    Size: 500.68 kB
  3. cockpit-doc-310.8-1.el8_10.ML.1.noarch.rpm
    MD5: d539f8c8358bd1de94c2743805699f5d
    SHA-256: 2b8582fd9ed6957610cbb755c9c6e2a200f54d7187fd85f0c6232bf331944e1b
    Size: 191.88 kB
  4. cockpit-system-310.8-1.el8_10.ML.1.noarch.rpm
    MD5: 1e492c048b8dc66c1bdc06b351cbb4e8
    SHA-256: 590a3f6737fb7b738777a8cc66a15d6b7776e7e36d835e6c25d78236089db692
    Size: 5.18 MB
  5. cockpit-ws-310.8-1.el8_10.ML.1.x86_64.rpm
    MD5: 4d9762f3702f1dc0107fb6987c160298
    SHA-256: 791b6cbd4622f24c8bb1f8384b96f9d17c8345270832bc09ef49ae288900a718
    Size: 0.96 MB