[CLSA-2026:1789376503] ignition: Fix of CVE-2026-39821
Type:
security
Severity:
Important
Release date:
2026-09-14 09:01:53 UTC
Description:
- CVE-2026-39821: reject Punycode labels that decode to an all-ASCII label in Profile.process() of the vendored golang.org/x/net/idna
CVEs fixed:
Updated packages:
  • ignition-2.21.0-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:f24e15c601234ada3e939e8e83f6336727d548057a036740c8c341be080a8201
  • ignition-edge-2.21.0-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:2d1b87258abd3502b53e218906c3f4c50ff30884b7ee53d5505f4fde7c2bfa66
  • ignition-grub-2.21.0-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:0e2707f51d8fb3012342e9f2be2914dae25c6a59dc1bb1f35ae15e8a89cbac73
  • ignition-validate-2.21.0-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:bcfc083746b07b3bc6defa3725d55ec5d2cc2a3b9a100267bb5d738444f1656b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.