[CLSA-2026:1791875223] ignition: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 07:11:02 UTC
Description:
- CVE-2026-33186: reject gRPC :path values that omit the leading slash in Server.handleStream (vendored google.golang.org/grpc)
CVEs fixed:
Updated packages:
  • ignition-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm
    sha:702abc7a508cf8cdc269fca48c87613c83e99b82ca03a4b11add20faf1acac40
  • ignition-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm
    sha:ab254759a181aacd3273ab21b89eebb4d9082c4a3a399bb1da1d9d9c361f910a
  • ignition-edge-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm
    sha:017294381032bf594381b07eb1e40b82b88bc10bf93017b702c2457e1e425411
  • ignition-edge-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm
    sha:d64955c1c2b7349a52b7873daa2c7305914838b2c5283c87bdf4169713b0fd35
  • ignition-grub-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm
    sha:f8d009d345ec3add689b68de2f4329b4a588b7a9b75969aa593c33bce45b9a0e
  • ignition-grub-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm
    sha:4635797e6c0f9bcb05db54388f98757ec476f480f98c6be8e1b7654d4f11105f
  • ignition-validate-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm
    sha:d90a26d9802381991bf17f1753048cbcacb079c03f3c50ee24436a4aca33ae90
  • ignition-validate-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm
    sha:b1d94791f90c3d4b5340b4e5afe43a4eae8beff7fe6d949394a5de6553e81336
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.