gpp_maybe Security update for cockpit-machines

SUSE-SLES-16.0-519

This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards followed by a literal character that doesn't appear in the test string can lead to ReDoS (bsc#1258641).

• Release Date
  Apr 10 2026
• References
  Bugzilla: 1257836, 1258641
  CVEs: CVE-2026-25547, CVE-2026-26996
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  cockpit-machines
  Cockpit user interface for virtual machines

  346-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  cockpit-machines
  Cockpit user interface for virtual machines

  346-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  cockpit-machines
  Cockpit user interface for virtual machines

  346-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  cockpit-machines
  Cockpit user interface for virtual machines

  346-160000.2.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  cockpit-machines
  Cockpit user interface for virtual machines

  346-160000.2.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  cockpit-machines
  Cockpit user interface for virtual machines

  346-160000.2.1 lock rpm