High ELSA-2026-91719 1 CVE

Important: ignition security update (Oracle Linux 9)

Published Oct 29, 2026 · Updated Oct 29, 2026

Ecosystem: Oracle Linux

Summary

[2.26.0-1.2]
- Rebuild with updated golang

[2.26.0-1.1]
- Rebuild with updated golang
- Resolves: RHEL-175424, RHEL-177307

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	ignition	0:2.26.0-1.el9_8.2
Oracle Linux · 9	ignition-edge	0:2.26.0-1.el9_8.2
Oracle Linux · 9	ignition-grub	0:2.26.0-1.el9_8.2
Oracle Linux · 9	ignition-validate	0:2.26.0-1.el9_8.2

Vulnerabilities 1

Medium 6.8

CVE-2026-111943 Public exploit

Distrust compromised intermediate certificates in crypto/x509

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…

Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go crates.io

Oct 21, 2026