Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 567
Alerts This Week
Warning Icon 1 567

SUSE Ignition Important Privilege Escalation and Loop Issues 2026-3265-1

suse
Calendar Grey July 27, 2026
Scroller Suse
Patch addresses two critical vulnerabilities in the ignition application on SUSE, emphasizing the importance of immediate updates.
A security update for SUSE Linux Enterprise Micro 5.5 addresses two vulnerabilities, enabling users to install patches that fix issues related to validation bypass and infinite loo...

Summary

## This update for ignition fixes the following issues * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). * CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid UTF-8 bytes can lead to infinite loop (bsc#1272059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-3265=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * ignition-2.17.0-150500.3.21.1

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE privilege escalation important ignition

References

* bsc#1266606

* bsc#1272059

Cross-

* CVE-2026-39821

* CVE-2026-56852

CVSS scores:

* CVE-2026-39821 ( SUSE ): 9.1

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

* CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-56852 ( SUSE ): 6.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Enterprise Micro 5.5

An update that solves two vulnerabilities can now be installed.

##

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3265-1
Release Date: 2026-07-27T10:52:43Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE privilege escalation important ignition

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.