- What: Security update for ignition
- Impact: Systems running Red Hat Enterprise Linux 9.6 EUS are affected
Red Hat Product Errata RHSA-2026:52826 - Security Advisory Issued: 2026-08-10 Updated: 2026-08-10 RHSA-2026:52826 - Security Advisory Overview Updated Packages Synopsis Important: ignition security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ignition is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration. Security Fix(es): golang.org/x/net/idna: golang: net/ http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2480756 - CVE-2026-39821 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVEs CVE-2026-39821 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a x86_64 ignition-2.21.0-7.el9_6.x86_64.rpm SHA-256: bfd4d411e06496564135fde66349fd8154c4a2e238e1396312fb154536987249 ignition-debuginfo-2.21.0-7.el9_6.x86_64.rpm SHA-256: 1cbbd421459f785e27362cb45c6b994fb01a1117a6e3ec4a9403470322e988d9 ignition-debugsource-2.21.0-7.el9_6.x86_64.rpm SHA-256: 78ddd624f64e77d894f407ab4786c0520427cde50a1a8e30d1e6720f6cb86772 ignition-edge-2.21.0-7.el9_6.x86_64.rpm SHA-256: 84bbbcb68efcc5ee47c6f5178fb59fb4bb8d1a21d8e451b5b569504b39632ba6 ignition-grub-2.21.0-7.el9_6.x86_64.rpm SHA-256: c78b39b5268748896745afd822e3425cdf5b257f58073123226c3fbe44a1049d ignition-validate-2.21.0-7.el9_6.x86_64.rpm SHA-256: be22d25856a5c4ec0b64d87d332e01550e99365252f11e7496dcc73745479cc9 ignition-validate-debuginfo-2.21.0-7.el9_6.x86_64.rpm SHA-256: 53fa7adfecf0a7b3ad71ae6468c9873b99aeb3fe54b396907851334d4928bc3c Red Hat Enterprise Linux Server - AUS 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a x86_64 ignition-2.21.0-7.el9_6.x86_64.rpm SHA-256: bfd4d411e06496564135fde66349fd8154c4a2e238e1396312fb154536987249 ignition-debuginfo-2.21.0-7.el9_6.x86_64.rpm SHA-256: 1cbbd421459f785e27362cb45c6b994fb01a1117a6e3ec4a9403470322e988d9 ignition-debugsource-2.21.0-7.el9_6.x86_64.rpm SHA-256: 78ddd624f64e77d894f407ab4786c0520427cde50a1a8e30d1e6720f6cb86772 ignition-edge-2.21.0-7.el9_6.x86_64.rpm SHA-256: 84bbbcb68efcc5ee47c6f5178fb59fb4bb8d1a21d8e451b5b569504b39632ba6 ignition-grub-2.21.0-7.el9_6.x86_64.rpm SHA-256: c78b39b5268748896745afd822e3425cdf5b257f58073123226c3fbe44a1049d ignition-validate-2.21.0-7.el9_6.x86_64.rpm SHA-256: be22d25856a5c4ec0b64d87d332e01550e99365252f11e7496dcc73745479cc9 ignition-validate-debuginfo-2.21.0-7.el9_6.x86_64.rpm SHA-256: 53fa7adfecf0a7b3ad71ae6468c9873b99aeb3fe54b396907851334d4928bc3c Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a s390x ignition-2.21.0-7.el9_6.s390x.rpm SHA-256: ae6dbb173b41c929e2ea254b6d3573803f47639f4927b4c087586503b4ed4f55 ignition-debuginfo-2.21.0-7.el9_6.s390x.rpm SHA-256: 8c6d92611c963b9659d6d0ec88c811fc950a7f0887fcb7e80ede6d4ea0c43195 ignition-debugsource-2.21.0-7.el9_6.s390x.rpm SHA-256: 304567dcb8f96d754bb573375271f83db53410725b81f01bd6dc0cd5401d6279 ignition-edge-2.21.0-7.el9_6.s390x.rpm SHA-256: 05f7c051a021095d8c0702e59ace298f54a2abf421aaf68239828cda537b5717 ignition-grub-2.21.0-7.el9_6.s390x.rpm SHA-256: c23db2b622948e7f896d42e174314a618fd563863875be7e54f1f0c740a8202e ignition-validate-2.21.0-7.el9_6.s390x.rpm SHA-256: 26cd7b76369d11139caf9cd5c6af8292aaeca8ec5955d5672867551cce040299 ignition-validate-debuginfo-2.21.0-7.el9_6.s390x.rpm SHA-256: 7d31fd93e3b6cb2a1a57140123dc4a17a6c445d39a163d5ef9579c587b560ff3 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a ppc64le ignition-2.21.0-7.el9_6.ppc64le.rpm SHA-256: 5979167dcf321bb7b6fdb3d5c8d7758d0766b104b4189c908975dcda4e716939 ignition-debuginfo-2.21.0-7.el9_6.ppc64le.rpm SHA-256: b89d954c0ed2ddc392c05da0485cf437c0b97f255dbe0215fe83c13488c0cd71 ignition-debugsource-2.21.0-7.el9_6.ppc64le.rpm SHA-256: ca61e55aa7e9a24223ecd02570189af034cd72fee883b5190fe0bef79b4f69e2 ignition-edge-2.21.0-7.el9_6.ppc64le.rpm SHA-256: 73e25b10f9a7d6f9985afce7423fa239904ff4d4f81ed21fc1d2b5efd511a543 ignition-grub-2.21.0-7.el9_6.ppc64le.rpm SHA-256: b3cad8742c7f3d1839fff8442d5773e8d24409c422810157bab193a69812023d ignition-validate-2.21.0-7.el9_6.ppc64le.rpm SHA-256: 2f0197b30192a35a82b664f09252b697cacac95aae393e9385fc2c5d30403c41 ignition-validate-debuginfo-2.21.0-7.el9_6.ppc64le.rpm SHA-256: d89caeb3ddaa339822b7853569fa7da5761ad0eb3e3d9f7bcf5f45ad1229ee4b Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a aarch64 ignition-2.21.0-7.el9_6.aarch64.rpm SHA-256: f6ff30b0913c1374a69a077b7129ea14b5c6ec7be570e014c7dc2051e295fef9 ignition-debuginfo-2.21.0-7.el9_6.aarch64.rpm SHA-256: 9b50076408867bbcf931f5b5b3b695e3c5d693742a0f7089b6bc044bd315270c ignition-debugsource-2.21.0-7.el9_6.aarch64.rpm SHA-256: c630648da065a78b205fa8249163f774c86cca9c11f2830c7dcedff964255760 ignition-edge-2.21.0-7.el9_6.aarch64.rpm SHA-256: 0be26dcedb5451a1a4682fe66408bf13e4ee17bdccaf22e197d43a6f137a9b62 ignition-grub-2.21.0-7.el9_6.aarch64.rpm SHA-256: b7633d8078d47333f211e24f27c865d7c2f640fde9b17020491f9130c4484489 ignition-validate-2.21.0-7.el9_6.aarch64.rpm SHA-256: e148862c644465e2431b72871306b62adf8f8dd4dcb5db1ddfb50f273a279db1 ignition-validate-debuginfo-2.21.0-7.el9_6.aarch64.rpm SHA-256: f17d59d5139ca9ca105914335e139d403e80c3a3574e7c0fcd5f34f2b14a93a9 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a ppc64le ignition-2.21.0-7.el9_6.ppc64le.rpm SHA-256: 5979167dcf321bb7b6fdb3d5c8d7758d0766b104b4189c908975dcda4e716939 ignition-debuginfo-2.21.0-7.el9_6.ppc64le.rpm SHA-256: b89d954c0ed2ddc392c05da0485cf437c0b97f255dbe0215fe83c13488c0cd71 ignition-debugsource-2.21.0-7.el9_6.ppc64le.rpm SHA-256: ca61e55aa7e9a24223ecd02570189af034cd72fee883b5190fe0bef79b4f69e2 ignition-edge-2.21.0-7.el9_6.ppc64le.rpm SHA-256: 73e25b10f9a7d6f9985afce7423fa239904ff4d4f81ed21fc1d2b5efd511a543 ignition-grub-2.21.0-7.el9_6.ppc64le.rpm SHA-256: b3cad8742c7f3d1839fff8442d5773e8d24409c422810157bab193a69812023d ignition-validate-2.21.0-7.el9_6.ppc64le.rpm SHA-256: 2f0197b30192a35a82b664f09252b697cacac95aae393e9385fc2c5d30403c41 ignition-validate-debuginfo-2.21.0-7.el9_6.ppc64le.rpm SHA-256: d89caeb3ddaa339822b7853569fa7da5761ad0eb3e3d9f7bcf5f45ad1229ee4b Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 SRPM ignition-2.21.0-7.el9_6.src.rpm SHA-256: ad78a0c79ad9e904d9f89373a53a938b6b2199836d9766853d7c8b543e25226a x86_64 ignition-2.21.0-7.el9_6.x86_64.rpm SHA-256: bfd4d411e06496564135fde66349fd8154c4a2e238e1396312fb154536987249 ignition-debuginfo-2.21.0-7.el9_6.x86_64.rpm SHA-256: 1cbbd421459f785e27362cb45c6b994fb01a1117a6e3ec4a9403470322e988d9 ignition-debugsource-2.21.0-7.el9_6.x86_64.rpm SHA-256: 78ddd624f64e77d894f407ab4786c0520427cde50a1a8e30d1e6720f6cb86772 ignition-edge-2.21.0-7.el9_6.x86_64.rpm SHA-256: 84bbbcb68efcc5ee47c6f5178fb59fb4bb8d1a21d8e451b5b569504b39632ba6 ignition-grub-2.21.0-7.el9_6.x86_64.rpm SHA-256: c78b39b5268748896745afd822e3425cdf5b257f58073123226c3fbe44a1049d ignition-validate-2.21.0-7.el9_6.x86_64.rpm SHA-256: be22d25856a5c4ec0b64d87d332e01550e99365252f11e7496dcc73745479cc9 ignition-validate-debuginfo-2.21.0-7.el9_6.x86_64.rpm