Summary
[1.4.0.1-2.0.1]
- Put 'Requires' openssl-libs in correct placeholder [Orabug: 38742109]
- Hard require needed openssl-libs [Orabug: 38742109]
[1.4.0.1-2]
- Introduce alias for ML-DSA keys during key generation
[1.4.0.1-1]
- Update to 1.4.0 and fix CVE-2026-42784
[1.3.1.1-2]
- Remove bundled capnproto
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | sequoia-sq | 0:1.4.0.1-2.0.1.el10_2 |
Vulnerabilities 1
-
High 7.4
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the b…