Back Linuxsecurity

Oracle Linux 10 Cockpit Image Builder Important Update ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • July 17, 2026

[94.3-1.0.1] - Switch to old frotend [Orabug: 38011073] [Orabug: 37856296] [Orabug: 37856375] - Replaced additional upstream url [Orabug: 37856187] - Replaced upstream urls in documentation with oracle links [Orabug: 37856187] [94.3-1] - New upstream release [94.2-1] - New upstream release [94.1-1] - Resolve CVE-2025-13465 and CVE-2026-4800

cockpit-image-builder-94.3-1.0.1.el10_2.noarch.rpm

Related CVEs: CVE-2025-13465 CVE-2026-4800

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux 10 Cockpit Vulnerabilities Lead to Remote Code Execution Risks Oracle has released important updates for Oracle Linux 10 Cockpit, addressing vulnerabilities that could lead to remote code execution. The updates include fixes for CVE-2026-4802 and CVE-2026-4800, which affect various components of the Cockpit management interface. Specifically, CVE-2026-4802 involves SSH argument injection, while CVE-2026-4800 relates to the Cockpit Image Builder. Both vulnerabilities were confirmed and patches are now available. Users of Oracle Linux 10 are advised to update their systems promptly to mitigate these risks. The updates were published on July 17, 2026, and are critical for maintaining system security. 2 sources 74

Extracted Entities

CVEs (2)

CVE-2025-13465 CVE-2026-4800