Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 567
Alerts This Week
Warning Icon 1 567

SUSE Ignition Important Security Update for CVE-2026-39821 CVE-2026-56852

suse
Calendar Grey July 27, 2026
Scroller Suse
SUSE's important security update for ignition addresses critical vulnerabilities and is vital for system integrity.
A SUSE security update addresses two vulnerabilities in ignition, impacting SUSE Linux Enterprise Micro 5.4, enhancing protection against validation bypass and infinite loops in pa...

Summary

## This update for ignition fixes the following issues * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). * CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing invalid UTF-8 bytes can lead to infinite loop (bsc#1272059). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-3266=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-3266=1 ## Package List:

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation vulnerability infinite loop ignition

References

* bsc#1266606

* bsc#1272059

Cross-

* CVE-2026-39821

* CVE-2026-56852

CVSS scores:

* CVE-2026-39821 ( SUSE ): 9.1

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

* CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-56852 ( SUSE ): 6.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Enterprise Micro 5.4

* SUSE Linux Enterprise Micro for Rancher 5.4

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3266-1
Release Date: 2026-07-27T10:52:50Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation vulnerability infinite loop ignition

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.