Red Hat Security AdvisoryRHSA-2026:59546
ignition security update
Released 2026-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) ignition-2.21.0-2.el10_0.3, ignition-edge-2.21.0-2.el10_0.3, ignition-validate-2.21.0-2.el10_0.3
Fixes 2 records
Priority MEDIUM 47
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.01834 · Published 2026-05-22 · Partial fix · 1.25.13, 1.26.6 +2 CWE-1289
Priority MEDIUM 42
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-04-08 · Partial fix · 1.26.2 CWE-295
