Debian Linux Security Advisory 5655-1 - It was discovered that Cockpit, a web console for Linux servers, was susceptible to arbitrary command execution if an administrative user was tricked into opening an sosreport file with a malformed filename.
14093fabc69fd65851f3932ac6e03e2c4be92f356b14adae4a02493d9c0dbc94