ALSA-2024:9325

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2024:9325
Related
Published
2024-11-12T00:00:00Z
Modified
2026-02-04T03:56:29.010232Z
Summary
Low: cockpit security update
Details

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

  • cockpit: Authenticated user can kill any process when enabling pamenv's userreadenv option (CVE-2024-6126)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:9
cockpit

Package

Name
cockpit
Purl
pkg:rpm/almalinux/cockpit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-bridge

Package

Name
cockpit-bridge
Purl
pkg:rpm/almalinux/cockpit-bridge

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-doc

Package

Name
cockpit-doc
Purl
pkg:rpm/almalinux/cockpit-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-packagekit

Package

Name
cockpit-packagekit
Purl
pkg:rpm/almalinux/cockpit-packagekit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-pcp

Package

Name
cockpit-pcp
Purl
pkg:rpm/almalinux/cockpit-pcp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-storaged

Package

Name
cockpit-storaged
Purl
pkg:rpm/almalinux/cockpit-storaged

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-system

Package

Name
cockpit-system
Purl
pkg:rpm/almalinux/cockpit-system

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"
cockpit-ws

Package

Name
cockpit-ws
Purl
pkg:rpm/almalinux/cockpit-ws

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
323.1-1.el9_5

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9325.json"