From 60bd217529394cf45bbf043b61b1cbd88c5eeeff Mon Sep 17 00:00:00 2001
From: AlmaLinux RelEng Bot <eabdullin@almalinux.org>
Date: Wed, 27 May 2026 16:37:10 -0400
Subject: [PATCH] import UBI cockpit-356.1-1.el9_8

---
 .cockpit.metadata  | 4 ++--
 .gitignore         | 4 ++--
 SPECS/cockpit.spec | 9 +++++++--
 3 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.cockpit.metadata b/.cockpit.metadata
index fedbc80..c0253e8 100644
--- a/.cockpit.metadata
+++ b/.cockpit.metadata
@@ -1,2 +1,2 @@
-30d7ff3e5bd30262d5acb750ab102d9ec9191d34 SOURCES/cockpit-356.tar.xz
-8764df74d283b120975e8cf2b25d0badc8c050f9 SOURCES/cockpit-node-356.tar.xz
+74f8dd2ef155bc62f13a960f172e20fda8cc1487 SOURCES/cockpit-356.1.tar.xz
+52cca4a97d49feb87f9ecf18cca0a4ae4766eebf SOURCES/cockpit-node-356.1.tar.xz
diff --git a/.gitignore b/.gitignore
index 00d8ab7..c93105a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-SOURCES/cockpit-356.tar.xz
-SOURCES/cockpit-node-356.tar.xz
+SOURCES/cockpit-356.1.tar.xz
+SOURCES/cockpit-node-356.1.tar.xz
diff --git a/SPECS/cockpit.spec b/SPECS/cockpit.spec
index e2ad29f..e7ed732 100644
--- a/SPECS/cockpit.spec
+++ b/SPECS/cockpit.spec
@@ -55,7 +55,7 @@ Summary:        Web Console for Linux servers
 License:        LGPL-2.1-or-later AND GPL-3.0-or-later AND MIT AND CC-BY-SA-3.0 AND BSD-3-Clause
 URL:            https://cockpit-project.org/
 
-Version:        356
+Version:        356.1
 Release:        1%{?dist}
 Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz
 Source1:        https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-node-%{version}.tar.xz
@@ -381,7 +381,7 @@ Provides: bundled(npm(dequal)) = 2.0.3
 Provides: bundled(npm(focus-trap)) = 7.6.4
 Provides: bundled(npm(ipaddr.js)) = 2.3.0
 Provides: bundled(npm(json-stable-stringify-without-jsonify)) = 1.0.1
-Provides: bundled(npm(lodash)) = 4.17.23
+Provides: bundled(npm(lodash)) = 4.18.1
 Provides: bundled(npm(prop-types)) = 15.8.1
 Provides: bundled(npm(react)) = 18.3.1
 Provides: bundled(npm(react-dom)) = 18.3.1
@@ -665,6 +665,11 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Mon Apr 13 2026 Tomas Matus <tmatus@redhat.com> - 356.1-1
+- ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
+- node: update lodash dependency (RHEL-164196)
+
+
 * Wed Feb 11 2026 Packit <hello@packit.dev> - 356-1
 - systemd: Allow editing timers created by Cockpit
 - Convert license headers to SPDX format