Update to upstream release 362

Fixes CVE-2026-4802

Resolves: RHEL-161408

.gitignore

@@ -347,3 +347,5 @@
 /cockpit-node-360.1.tar.xz
 /cockpit-361.tar.xz
 /cockpit-node-361.tar.xz
+/cockpit-362.tar.xz
+/cockpit-node-362.tar.xz

README.packit

@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.15.3.post1.dev4+g553394da5.
+The file was generated using packit 1.16.0.post1.dev2+ged481c62d.

cockpit.spec

@@ -55,7 +55,7 @@ Summary:        Web Console for Linux servers
 License:        LGPL-2.1-or-later AND GPL-3.0-or-later AND MIT AND CC-BY-SA-3.0 AND BSD-3-Clause
 URL:            https://cockpit-project.org/
 
-Version:        361
+Version:        362
 Release:        1%{?dist}
 Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz
 Source1:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-node-%{version}.tar.xz
@@ -370,16 +370,16 @@ Provides: cockpit-sosreport = %{version}-%{release}
 %endif
 
 Provides: bundled(npm(@patternfly/patternfly)) = 6.4.0
-Provides: bundled(npm(@patternfly/react-core)) = 6.4.1
+Provides: bundled(npm(@patternfly/react-core)) = 6.4.3
 Provides: bundled(npm(@patternfly/react-icons)) = 6.4.0
 Provides: bundled(npm(@patternfly/react-styles)) = 6.4.0
-Provides: bundled(npm(@patternfly/react-table)) = 6.4.1
+Provides: bundled(npm(@patternfly/react-table)) = 6.4.3
 Provides: bundled(npm(@patternfly/react-tokens)) = 6.4.0
 Provides: bundled(npm(@xterm/addon-webgl)) = 0.19.0
 Provides: bundled(npm(@xterm/xterm)) = 6.0.0
 Provides: bundled(npm(dequal)) = 2.0.3
 Provides: bundled(npm(focus-trap)) = 7.6.4
-Provides: bundled(npm(ipaddr.js)) = 2.3.0
+Provides: bundled(npm(ipaddr.js)) = 2.4.0
 Provides: bundled(npm(json-stable-stringify-without-jsonify)) = 1.0.1
 Provides: bundled(npm(lodash)) = 4.18.1
 Provides: bundled(npm(prop-types)) = 15.8.1
@@ -665,6 +665,10 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Wed May 20 2026 Packit <hello@packit.dev> - 362-1
+- Bug fixes and translation updates
+- Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)
+
 * Tue Apr 21 2026 Packit <hello@packit.dev> - 361-1
 - Remove all "Mount" actions in Anaconda mode
 - Dependency updates

packit.yaml

@@ -103,7 +103,7 @@ jobs:
           tools/fix-spec "${PACKIT_DOWNSTREAM_REPO:-${PACKIT_UPSTREAM_REPO}}/cockpit.spec"
           '
 
-      fix-spec-file: null
+      fix-spec-file: ""
   - job: propose_downstream
     trigger: release
     actions: *official_release_actions

sources

@@ -1,2 +1,2 @@
-SHA512 (cockpit-361.tar.xz) = 64c78a0bb4be2c4dd22fd3f2926ff63b8a238eb4720eb2108b955ff6d7a67b2f4a28af37e8908276fb376efcf2c151396aa38a0adada06b9651a8d762bc3f73c
-SHA512 (cockpit-node-361.tar.xz) = 5bd289049e1c34fc5b0950e3b6feda793ee6c1425b316af5d4d0fb78a2bb95b7a11f8b85e7eea074599a307c0c1873c4875ea2fd6800c936d9ee4691b56f44bf
+SHA512 (cockpit-362.tar.xz) = bbad36ec1c805a2434210ae1535f0495e76c75fdd14eb7826b42488beda7bc7547a9bdae649c88a756127268ae81d8d45945f4b5d1964fd376f26341e2e38633
+SHA512 (cockpit-node-362.tar.xz) = 0d76ee02098e02bfcb3cf2b6cfb48d68a31b8e84ea7262ab23bdc62d0c5ccc69358bc6cc36bc5b51c64eecfb5ac2a6e3c41bcac74fd797d4c068b403db05f8cc