rpm package
almalinux/rpm-sequoia
pkg:rpm/almalinux/rpm-sequoia
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-42784 | Hig | 7.4 | < 1.10.2.1-1.el9_8 | 1.10.2.1-1.el9_8 | Sep 16, 2026 | A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. |
- affected < 1.10.2.1-1.el9_8fixed 1.10.2.1-1.el9_8
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check.