369

- Translations and dependency updates

310.10

- ws: don't crash when urlroot has no trailing slash (RHEL-262904) [CVE-2026-91147]
- ws: Free "language" string also when it comes from the cookie (RHEL-244631) [CVE-2026-76235]
- packagekit: Sanitize markdown urls [CVE-2026-91148]

368

- Limit concurrent connections CVE-2026-91149
- Harden cockpit-ws against trailing slash CVE-2026-91147
- Sanitize URLs from PackageKit CVE-2026-91148
- Interactive file chooser for SSH keys
- Bug fixes and translation updates
- Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4
- Resolves RHEL-263066 for rhel-9.10

366.1

- Fixes for CVE-2026-91147, CVE-2026-91149, CVE-2026-76235, CVE-2026-91148
- Resolves: RHEL-244638, RHEL-262967, RHEL-263075 (rhel-9.9.z)
- Resolves: RHEL-262968, RHEL-263072, RHEL-244641 (rhel-10.3.z)

356.4

- Fixes for CVE-2026-91147, CVE-2026-91149, CVE-2026-76235, CVE-2026-91148
- Resolves: RHEL-244637, RHEL-262905, RHEL-263074 (rhel-9.8.z)
- Resolves: RHEL-244640, RHEL-262894, RHEL-263062 (rhel-10.2.z)

367

- Translation updates

366

- Networkmanager: Don't activate new network connections by default
- Networkmanager: Navigate to details page after creation
- Translations and dependency updates

356.3

- sosreport: Provide encryption pass via an env variable (RHEL-220573, RHEL-220574)

310.9

- sosreport: Provide encryption pass via an env variable (RHEL-219123)
- selinux: give cockpit_session_t Kerberos access (RHEL-185926)

365

- Translations and dependency updates
- Fix btrfs subvolume mount option parsing (rhbz#2483145)