SUSE-SU-2026:21321-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-202621321-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:21321-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:21321-1
Upstream
Related
Published
2026-04-22T13:00:02Z
Modified
2026-04-28T18:26:31.867302Z
Summary
Security update for cockpit-podman
Details

This update for cockpit-podman fixes the following issues:

  • CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836).
  • CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards followed by a literal character that doesn't appear in the test string can lead to ReDoS (bsc#1258641).
References

Affected packages