OPENSUSE-SU-2026:20532-1
Not scored
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
Exploit probability
Not scored
Published
April 14, 2026
Required by
Not available
Last source change
April 22, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
openSUSE-SU-2026:20532-1
View original source
This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).
05 / REFERENCES