Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.2 | rust-sequoia-sq | 0:1.4.0.1-4.el10_2 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | rust-sequoia-sq-debugsource | 0:1.4.0.1-4.el10_2 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | sequoia-sq | 0:1.4.0.1-4.el10_2 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | sequoia-sq-debuginfo | 0:1.4.0.1-4.el10_2 |
Vulnerabilities 2
-
High 7.5
rustls-webpki before 0.103.13 Panic via empty BIT STRING
rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no…
-
High 7.5
hickory-resolver before 0.26.2 DNSSEC Validation Bypass
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or posit…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2538208
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2538431
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85848.json
-
report
https://access.redhat.com/security/cve/CVE-2026-93599
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-93599
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-93599
-
article
https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8
-
article
https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string
-
report
https://access.redhat.com/security/cve/CVE-2026-93657
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-93657
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-93657
-
article
https://github.com/hickory-dns/hickory-dns
-
article
https://github.com/hickory-dns/hickory-dns/commit/30720f4fb22e5556ecbf26d2c8274ea4a9fdd238
-
article
https://github.com/hickory-dns/hickory-dns/pull/3871
-
article
https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2
-
article
https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-5j98-2g5x-46v6
-
article
https://www.vulncheck.com/advisories/hickory-resolver-before-0.26.2-dnssec-validation-bypass