import UBI cockpit-356.1-1.el9_8

.cockpit.metadata

@@ -1,2 +1,2 @@
-30d7ff3e5bd30262d5acb750ab102d9ec9191d34 SOURCES/cockpit-356.tar.xz
-8764df74d283b120975e8cf2b25d0badc8c050f9 SOURCES/cockpit-node-356.tar.xz
+74f8dd2ef155bc62f13a960f172e20fda8cc1487 SOURCES/cockpit-356.1.tar.xz
+52cca4a97d49feb87f9ecf18cca0a4ae4766eebf SOURCES/cockpit-node-356.1.tar.xz

.gitignore

@@ -1,2 +1,2 @@
-SOURCES/cockpit-356.tar.xz
-SOURCES/cockpit-node-356.tar.xz
+SOURCES/cockpit-356.1.tar.xz
+SOURCES/cockpit-node-356.1.tar.xz

SPECS/cockpit.spec

@@ -55,7 +55,7 @@ Summary:        Web Console for Linux servers
 License:        LGPL-2.1-or-later AND GPL-3.0-or-later AND MIT AND CC-BY-SA-3.0 AND BSD-3-Clause
 URL:            https://cockpit-project.org/
 
-Version:        356
+Version:        356.1
 Release:        1%{?dist}
 Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz
 Source1:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-node-%{version}.tar.xz
@@ -381,7 +381,7 @@ Provides: bundled(npm(dequal)) = 2.0.3
 Provides: bundled(npm(focus-trap)) = 7.6.4
 Provides: bundled(npm(ipaddr.js)) = 2.3.0
 Provides: bundled(npm(json-stable-stringify-without-jsonify)) = 1.0.1
-Provides: bundled(npm(lodash)) = 4.17.23
+Provides: bundled(npm(lodash)) = 4.18.1
 Provides: bundled(npm(prop-types)) = 15.8.1
 Provides: bundled(npm(react)) = 18.3.1
 Provides: bundled(npm(react-dom)) = 18.3.1
@@ -665,6 +665,11 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Mon Apr 13 2026 Tomas Matus <tmatus@redhat.com> - 356.1-1
+- ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
+- node: update lodash dependency (RHEL-164196)
+
+
 * Wed Feb 11 2026 Packit <hello@packit.dev> - 356-1
 - systemd: Allow editing timers created by Cockpit
 - Convert license headers to SPDX format