Summary
[1.4.0.1-4.0.1]
- Put 'Requires' openssl-libs in correct placeholder [Orabug: 38742109]
- Hard require needed openssl-libs [Orabug: 38742109]
[1.4.0.1-4]
- Fix CVE-2026-93657
[1.4.0.1-3]
- Fix CVE-2026-93599
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | sequoia-sq | 0:1.4.0.1-4.0.1.el10_2 |
Vulnerabilities 2
-
High 7.5
rustls-webpki before 0.103.13 Panic via empty BIT STRING
rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no…
-
High 7.5
hickory-resolver before 0.26.2 DNSSEC Validation Bypass
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or posit…