Issued at: 2026-10-07
Updated at: 2026-10-07
Advisory content derived from Red Hat RHSA-2026:76734, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: rust-rpm-sequoia security, bug fix, and enhancement update
Description
An implementation of the RPM PGP interface using Sequoia.
Security Fix(es):
* sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)
Bug Fix(es) and Enhancement(s):
* Uninformative error message on --import failure [rhel-10.2.z] (JIRA:Rocky Linux-176906)
* Return NotTrusted importing non-allowed keys [rhel-10.2.z] (JIRA:Rocky Linux-176907)
* [FTBFS] Update bindgen for LLVM 22 compatibility [rhel-10.2.z] (JIRA:Rocky Linux-176908)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.