Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-91720

Опубликовано: 29 окт. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2026-91720: ignition security update (IMPORTANT)

[2.26.0-3.0.1.4]

  • Drop RHCK specific module inclusion [Orabug: 39718726]
  • Remove sgdisk requirement and create symbolic link to sgdisk [Orabug: 37470782]

[2.26.0-4]

  • Rebuild ignition against updated golang

[2.26.0-3]

  • Rebuild ignition against updated golang

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

ignition

2.26.0-3.0.1.el10_2.4

ignition-edge

2.26.0-3.0.1.el10_2.4

ignition-grub

2.26.0-3.0.1.el10_2.4

ignition-validate

2.26.0-3.0.1.el10_2.4

Oracle Linux x86_64

ignition

2.26.0-3.0.1.el10_2.4

ignition-edge

2.26.0-3.0.1.el10_2.4

ignition-grub

2.26.0-3.0.1.el10_2.4

ignition-validate

2.26.0-3.0.1.el10_2.4

Связанные CVE

Связанные уязвимости

CVSS3: 6.8
ubuntu
19 дней назад

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

CVSS3: 6.8
redhat
20 дней назад

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

CVSS3: 6.8
nvd
19 дней назад

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

CVSS3: 7.4
msrc
9 дней назад

Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509

CVSS3: 6.8
debian
19 дней назад

On most platforms, Go uses the given system root certificates. However ...