Red Hat Product Errata RHSA-2026:65359 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:65359 - Security Advisory Overview Updated Packages Synopsis Important: ignition security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ignition is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration. Security Fix(es): crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) golang.org/x/net/idna: golang: net/ http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) net/ http: golang: Go net/ http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2456335 - CVE-2026-33810 crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application BZ - 2480756 - CVE-2026-39821 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing BZ - 2515815 - CVE-2026-33818 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal BZ - 2515820 - CVE-2026-56860 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution BZ - 2515827 - CVE-2026-56853 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service BZ - 2515838 - CVE-2026-56858 html/template: golang: Go html/template: Cross-Site Scripting via pathological input BZ - 2515839 - CVE-2026-56862 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages BZ - 2515840 - CVE-2026-56859 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVEs CVE-2026-33810 CVE-2026-33818 CVE-2026-39821 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12ab4a4829f8941d39d362694ece475a799e848fff4cca773d17 x86_64 ignition-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: d5ac35d0209e19ffcce1250d6ab4d3b418da450cf668d77d5490b0c4903a292c ignition-debuginfo-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: fdf65b004202078bc6472eb2d806bdf2dcff67e89a94609eb1700c299672a92a ignition-debugsource-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: b98b6ea09d999a9d584be68d6de57226b0f36da137b8d53bf1b23da47e6176cd ignition-edge-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: 89edc70ccfa1ea19a791ed2aa1435203fa67ffdf398109863f14736fab29ef63 ignition-validate-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: 1766afbc32247fe2bb6296f286903bee7a9f11fb49b86ebdbcbae9b4d6d1d4f8 ignition-validate-debuginfo-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: cf410dbfe90dc895b89345a34ee07212ae978c9b1209f36d81c4e57d25b1838b Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12ab4a4829f8941d39d362694ece475a799e848fff4cca773d17 ppc64le ignition-2.15.0-2.el9_2.1.ppc64le.rpm SHA-256: 61e29d7cc9f66218fc0f1d198a689dad7a5e2fe51fc66dc8a43b2846dcade3e1 ignition-debuginfo-2.15.0-2.el9_2.1.ppc64le.rpm SHA-256: 2ebba0f665c83c993cee353257e7e7f2c4907fd2071ffdcc3b9829e6b97d5575 ignition-debugsource-2.15.0-2.el9_2.1.ppc64le.rpm SHA-256: 566d8764f4b0145d3f93156ff4ac765592202e103f2697816ef3c2f8f4823432 ignition-edge-2.15.0-2.el9_2.1.ppc64le.rpm SHA-256: 4347869fb62dfa49a06f3ca6c9a46785afa8adeabab2642e3c507859d2da2861 ignition-validate-2.15.0-2.el9_2.1.ppc64le.rpm SHA-256: d7b9e7940fcce29570a2197ec3e6785021bf6fd05b18cbbca536cc56d5a35788 ignition-validate-debuginfo-2.15.0-2.el9_2.1.ppc64le.rpm SHA-256: 132386265dc03bb5128a5fc997c4412b8bec4879e8125ad81738bd604817760e Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12ab4a4829f8941d39d362694ece475a799e848fff4cca773d17 x86_64 ignition-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: d5ac35d0209e19ffcce1250d6ab4d3b418da450cf668d77d5490b0c4903a292c ignition-debuginfo-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: fdf65b004202078bc6472eb2d806bdf2dcff67e89a94609eb1700c299672a92a ignition-debugsource-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: b98b6ea09d999a9d584be68d6de57226b0f36da137b8d53bf1b23da47e6176cd ignition-edge-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: 89edc70ccfa1ea19a791ed2aa1435203fa67ffdf398109863f14736fab29ef63 ignition-validate-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: 1766afbc32247fe2bb6296f286903bee7a9f11fb49b86ebdbcbae9b4d6d1d4f8 ignition-validate-debuginfo-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: cf410dbfe90dc895b89345a34ee07212ae978c9b1209f36d81c4e57d25b1838b Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12ab4a4829f8941d39d362694ece475a799e848fff4cca773d17 aarch64 ignition-2.15.0-2.el9_2.1.aarch64.rpm SHA-256: 824a7d495c88e3c6ceec08aa7cf8dc5a4594a94d1a77cfd9a4dcac363883f139 ignition-debuginfo-2.15.0-2.el9_2.1.aarch64.rpm SHA-256: 10d08f9ff2e3fdc0d0b8bda33db35cb112665c339daba7ae4d2c24639fec314e ignition-debugsource-2.15.0-2.el9_2.1.aarch64.rpm SHA-256: cc2ef77598e955c9b0801f49690d52becd999205d47313172aa61f251fbbac32 ignition-edge-2.15.0-2.el9_2.1.aarch64.rpm SHA-256: ea63983611fbf46dda0e199c338b5c20e208a3fc43472cdc3e930ed5f9107482 ignition-validate-2.15.0-2.el9_2.1.aarch64.rpm SHA-256: 5faf16a6689e331be67f7379395191c322dd797c4c24ab8f73bb7019a5528231 ignition-validate-debuginfo-2.15.0-2.el9_2.1.aarch64.rpm SHA-256: 665f3796dfa2e23d670d4b9995119b58741a3a8e4a4077069bca09dc6bc26d51 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12ab4a4829f8941d39d362694ece475a799e848fff4cca773d17 s390x ignition-2.15.0-2.el9_2.1.s390x.rpm SHA-256: 6c7d6334499bdbf081c045a39d589f99642303981ed935e28a568f96f657cf33 ignition-debuginfo-2.15.0-2.el9_2.1.s390x.rpm SHA-256: 57d391a64a27571f56a2138950545bdd1b5228fcd0002d2be8be9a29c12b4675 ignition-debugsource-2.15.0-2.el9_2.1.s390x.rpm SHA-256: 5d4f98454664a025a18bf71d5511f2f77a1cb7ba0aae0906f536efef9bfd9159 ignition-edge-2.15.0-2.el9_2.1.s390x.rpm SHA-256: d866eae3114678d0209ab8fcd0e659015ac21a15781677d42a7f4c0b6ab5951d ignition-validate-2.15.0-2.el9_2.1.s390x.rpm SHA-256: 5c0156fb690a99160e750e9c81c23430bd7a75fa4356761ffd190ce70d01ce25 ignition-validate-debuginfo-2.15.0-2.el9_2.1.s390x.rpm SHA-256: c61b007b84332eb4c3d54c22297e2a27a14d814ae3ac18478975afd704e6945f Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12ab4a4829f8941d39d362694ece475a799e848fff4cca773d17 x86_64 ignition-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: d5ac35d0209e19ffcce1250d6ab4d3b418da450cf668d77d5490b0c4903a292c ignition-debuginfo-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: fdf65b004202078bc6472eb2d806bdf2dcff67e89a94609eb1700c299672a92a ignition-debugsource-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: b98b6ea09d999a9d584be68d6de57226b0f36da137b8d53bf1b23da47e6176cd ignition-edge-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: 89edc70ccfa1ea19a791ed2aa1435203fa67ffdf398109863f14736fab29ef63 ignition-validate-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: 1766afbc32247fe2bb6296f286903bee7a9f11fb49b86ebdbcbae9b4d6d1d4f8 ignition-validate-debuginfo-2.15.0-2.el9_2.1.x86_64.rpm SHA-256: cf410dbfe90dc895b89345a34ee07212ae978c9b1209f36d81c4e57d25b1838b Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM ignition-2.15.0-2.el9_2.1.src.rpm SHA-256: 6b894d4379ad12a