ALSA-2026:95570
See a problem?- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:95570.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2026:95570
- Upstream
CVE (3)
- CVE-2026-91202
- CVE-2026-91203
- CVE-2026-91205
- Related
- Published
- 2026-11-05T00:00:00Z
- Modified
- 2026-11-06T12:00:02Z
- Summary
- Moderate: cockpit-files security update
- Details
-
A filesystem browser for Cockpit
Security Fix(es):
- cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition (CVE-2026-91203)
- cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste (CVE-2026-91202)
- cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2026:95570
- https://access.redhat.com/security/cve/CVE-2026-91202
- https://access.redhat.com/security/cve/CVE-2026-91203
- https://access.redhat.com/security/cve/CVE-2026-91205
- https://bugzilla.redhat.com/2465632
- https://bugzilla.redhat.com/2465834
- https://bugzilla.redhat.com/2466442
- https://errata.almalinux.org/10/ALSA-2026-95570.html