rpm package
almalinux/sequoia-sqv
pkg:rpm/almalinux/sequoia-sqv
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-42784 | Hig | 7.4 | < 1.3.0.2-1.el10_2 | 1.3.0.2-1.el10_2 | Sep 16, 2026 | A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. |
- affected < 1.3.0.2-1.el10_2fixed 1.3.0.2-1.el10_2
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check.