Summary
[1.10.2.1-1]
- Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | rpm-sequoia | 0:1.10.2.1-1.el9_8 |
| Oracle Linux · 9 | rpm-sequoia-devel | 0:1.10.2.1-1.el9_8 |
Vulnerabilities 1
-
High 7.4
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the b…