CVE-2024-6126

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

• cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• CVE-2026-4802: fix shell command injection via boot descriptor query string in the system logs page by quoting journalctl arguments using shlex-style single- quote escaping

• CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Mageia's internal bug: In the current version you can't login in the web interface with firefox or chromium-browser packaged by Mageia. This update fixes the issue, but it is reported that could need to reboot and clear cookies from your browser. A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack - CVE-2024-6126. Please note that you need to edit /etc/nsswitch.conf as recommended in https://bugs.mageia.org/show_bug.cgi?id=33368#c18.

This update for cockpit fixes the following issues:

• new version 320:

  • pam-ssh-add: Fix insecure killing of session ssh-agent (boo#1226040, CVE-2024-6126)

• changes in older versions:

  • Storage: Btrfs snapshots
  • Podman: Add image pull action
  • Files: Bookmark support
  • webserver: System user changes
  • Metrics: Grafana setup now prefers Valkey

• Invalid json against the storaged manifest boo#1227299

These are all security issues fixed in the cockpit-320-1.1 package on the GA media of openSUSE Tumbleweed.

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

• cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.

This update for cockpit fixes the following issues:

• CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).

This update for cockpit fixes the following issues:

• CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).

This update for cockpit fixes the following issues:

• CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).

This update for cockpit fixes the following issues:

• CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).

This update for cockpit fixes the following issues:

• CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).