Every CVESearch/Get API key

CVE-2026-42784

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

7.4 HighFix available

CVE-2026-42784 is a high vulnerability (CVSS 7.4) in Red Hat Confidential Compute Attestation, published July 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in rpm-sequoia 1.10.2.1-1.el9_8.

Severity
7.4 HighCVSS 3.1, CVE List
Exploit chance
0.35%EPSS, 28th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.10.2.1-1.el9_8rpm-sequoia +299 more

Description

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.35%Up 0.2 points since Sep 17, 2026
90%50%10%1%

Affected products

Show 3 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
rpm-sequoia
AlmaLinux:9
before 1.10.2.1-1.el9_8
1.10.2.1-1.el9_8
rpm-sequoia-devel
AlmaLinux:9
before 1.10.2.1-1.el9_8
1.10.2.1-1.el9_8
rpm-sequoia
AlmaLinux:10
before 1.10.2.1-1.el10_2
1.10.2.1-1.el10_2
rpm-sequoia-devel
AlmaLinux:10
before 1.10.2.1-1.el10_2
1.10.2.1-1.el10_2
sequoia-sqv
AlmaLinux:10
before 1.3.0.2-1.el10_2
1.3.0.2-1.el10_2
sequoia-sq
AlmaLinux:10
before 1.4.0.1-2.el10_2
1.4.0.1-2.el10_2
kata-containers-cc
Azure Linux:3
before 3.15.0.aks0-23
3.15.0.aks0-23
rust-sequoia-openpgp
Debian:12
All versions, plus listed versions
1.12.0-21.13.0-11.16.0-11.16.0-21.16.0-3
Show 28 moreShow less
1.16.1-11.16.1-21.17.0-11.17.0-21.18.0-11.19.0-11.20.0-11.20.0-21.21.0-11.21.1-11.21.1-21.21.2-11.21.2-21.22.0-11.22.0-22.0.0-12.0.0-22.0.0-32.0.0-42.0.0-52.1.0-12.1.0-22.1.0-32.2.0-12.2.0-22.3.0-12.4.1-12.4.1-2
None known
rust-sequoia-openpgp
Debian:13
All versions, plus listed versions
2.0.0-22.0.0-2+deb13u12.0.0-32.0.0-42.0.0-5
Show 8 moreShow less
2.1.0-12.1.0-22.1.0-32.2.0-12.2.0-22.3.0-12.4.1-12.4.1-2
None known
rust-sequoia-openpgp
Debian:14
before 2.2.0-2, plus listed versions
2.0.0-22.0.0-32.0.0-42.0.0-52.1.0-12.1.0-22.1.0-32.2.0-1
2.2.0-2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
python3.12-pysequoia
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:0.1.35-1.el9pc
0:0.1.35-1.el9pc
python3.12-pysequoia
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:0.1.35-1.el9pc
0:0.1.35-1.el9pc
rubygem-crass
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.0.8-1.el9sat
0:1.0.8-1.el9sat
rubygem-katello
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:4.20.0.12-1.el9sat
0:4.20.0.12-1.el9sat
foreman
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman
Red Hat:satellite_utils:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-cli
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-debug
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-ec2
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-journald
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-libvirt
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-openstack
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-pcp
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-postgresql
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-redis
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-service
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-telemetry
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
foreman-vmware
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.0.19-1.el9sat
0:3.18.0.19-1.el9sat
python3.12-pulpcore
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:3.85.35-1.el9pc
0:3.85.35-1.el9pc
python3.12-pulpcore
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.85.35-1.el9pc
0:3.85.35-1.el9pc
createrepo_c
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-debuginfo
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-debugsource
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-libs
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-libs-debuginfo
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
python3.12-createrepo_c
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
python3.12-createrepo_c-debuginfo
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
python3.12-pulp-container
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:2.26.19-2.el9pc
0:2.26.19-2.el9pc
python3.12-pulp-rpm
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:3.32.15-1.el9pc
0:3.32.15-1.el9pc
python3.12-pyjwt+crypto
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python3.12-pyjwt
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
rubygem-http-cookie
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.1.6-2.el9sat
0:1.1.6-2.el9sat
rubygem-smart_proxy_container_gateway
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:3.5.1-1.el9sat
0:3.5.1-1.el9sat
rubygem-smart_proxy_dynflow
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:1.0.0-3.el9sat
0:1.0.0-3.el9sat
satellite
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-capsule
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-common
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-obsolete-packages
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
rubygem-hammer_cli_foreman
Red Hat:satellite_utils:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.3-1.el9sat
0:3.18.3-1.el9sat
rubygem-http-cookie
Red Hat:satellite_utils:6.19::el9
From an advisory covering 20 CVEs
before 0:1.1.6-2.el9sat
0:1.1.6-2.el9sat
satellite
Red Hat:satellite_utils:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-cli
Red Hat:satellite_utils:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
candlepin
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:4.7.7-2.el9sat
0:4.7.7-2.el9sat
candlepin-selinux
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:4.7.7-2.el9sat
0:4.7.7-2.el9sat
createrepo_c
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-debuginfo
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-debugsource
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-libs
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
createrepo_c-libs-debuginfo
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
python3.12-createrepo_c
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
python3.12-createrepo_c-debuginfo
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.2.6-1.el9pc
0:1.2.6-1.el9pc
python3.12-pulp-container
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:2.26.19-2.el9pc
0:2.26.19-2.el9pc
python3.12-pulp-rpm
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.32.15-1.el9pc
0:3.32.15-1.el9pc
python3.12-pyjwt+crypto
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python3.12-pyjwt
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
rubygem-foreman_ansible
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:17.0.5-2.el9sat
0:17.0.5-2.el9sat
rubygem-foreman_remote_execution
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:16.5.3-3.el9sat
0:16.5.3-3.el9sat
rubygem-foreman_remote_execution-cockpit
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:16.5.3-3.el9sat
0:16.5.3-3.el9sat
rubygem-foreman_rh_cloud
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:13.2.12-1.el9sat
0:13.2.12-1.el9sat
rubygem-foreman_theme_satellite
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:16.2.5-1.el9sat
0:16.2.5-1.el9sat
rubygem-hammer_cli_foreman
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.18.3-1.el9sat
0:3.18.3-1.el9sat
rubygem-http-cookie
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.1.6-2.el9sat
0:1.1.6-2.el9sat
rubygem-safemode
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.5.0-3.el9sat
0:1.5.0-3.el9sat
rubygem-smart_proxy_container_gateway
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:3.5.1-1.el9sat
0:3.5.1-1.el9sat
rubygem-smart_proxy_dynflow
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:1.0.0-3.el9sat
0:1.0.0-3.el9sat
satellite
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-cli
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-common
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
satellite-obsolete-packages
Red Hat:satellite:6.19::el9
From an advisory covering 20 CVEs
before 0:6.19.6-1.el9sat
0:6.19.6-1.el9sat
automation-platform-ui
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:2.6.10-1.el9ap
0:2.6.10-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
python3.12-pysequoia
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debugsource
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 11 CVEs
before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
python3.12-pyjwt+crypto
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.12-pyjwt
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 11 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.5.20260715-1.el8ap
0:2.5.20260715-1.el8ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.5.20260715-1.el9ap
0:2.5.20260715-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
ansible-core
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 25 CVEs
before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
ansible-core
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 25 CVEs
before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
ansible-core
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
ansible-core
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 25 CVEs
before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
ansible-core
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 25 CVEs
before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
ansible-core
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
python3.12-pulpcore
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:3.49.63-2.el8ap
0:3.49.63-2.el8ap
python3.12-pulpcore
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:3.49.63-2.el9ap
0:3.49.63-2.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
python3.12-gitpython
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:3.1.50-1.el8ap
0:3.1.50-1.el8ap
python3.12-gitpython
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:3.1.50-1.el9ap
0:3.1.50-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
python3.12-urllib3
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 25 CVEs
before 0:2.7.0-1.el8ap
0:2.7.0-1.el8ap
ansible-test
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-eda-controller
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-base
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-base-services
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-event-stream-services
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-worker-services
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.5.20260715-1.el8ap
0:2.5.20260715-1.el8ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.5.20260715-1.el8ap
0:2.5.20260715-1.el8ap
automation-hub
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.10.16-1.el8ap
0:4.10.16-1.el8ap
python3.12-galaxy-ng
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:4.10.16-1.el8ap
0:4.10.16-1.el8ap
python3.12-pulp-ansible
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 1:0.25.6-1.el8ap
1:0.25.6-1.el8ap
python3.12-pulp-container
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.19.12-1.el8ap
0:2.19.12-1.el8ap
python3.12-pyjwt+crypto
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
python3.12-pyjwt
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
python3.12-pysequoia
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:0.1.34-1.el8ap
0:0.1.34-1.el8ap
python3.12-pysequoia-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:0.1.34-1.el8ap
0:0.1.34-1.el8ap
python3.12-pysequoia-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:0.1.34-1.el8ap
0:0.1.34-1.el8ap
python3.12-urllib3
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 25 CVEs
before 0:2.7.0-1.el8ap
0:2.7.0-1.el8ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 25 CVEs
before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
ansible-test
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-eda-controller
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-base
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-base-services
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-event-stream-services
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-worker-services
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.5.20260715-1.el9ap
0:2.5.20260715-1.el9ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.5.20260715-1.el9ap
0:2.5.20260715-1.el9ap
automation-hub
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.10.16-1.el9ap
0:4.10.16-1.el9ap
python3.12-galaxy-ng
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:4.10.16-1.el9ap
0:4.10.16-1.el9ap
python3.12-pulp-ansible
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 1:0.25.6-1.el9ap
1:0.25.6-1.el9ap
python3.12-pulp-container
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.19.12-1.el9ap
0:2.19.12-1.el9ap
python3.12-pyjwt+crypto
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.12-pyjwt
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.12-pysequoia
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 25 CVEs
before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
podman-sequoia
Red Hat:hummingbird:1
before 0:0.3.2-4.hum1
0:0.3.2-4.hum1
rust-podman-sequoia
Red Hat:hummingbird:1
before 0:0.3.2-4.hum1
0:0.3.2-4.hum1
rpm-sequoia
Red Hat:enterprise_linux:9::baseos
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia
Red Hat:enterprise_linux:9::baseos
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux:9::baseos
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia-debuginfo
Red Hat:enterprise_linux:9::crb
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia-devel
Red Hat:enterprise_linux:9::crb
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux:9::crb
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia
Red Hat:enterprise_linux:10.2
before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rpm-sequoia-debuginfo
Red Hat:enterprise_linux:10.2
before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-rpm-sequoia
Red Hat:enterprise_linux:10.2
before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux:10.2
before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rpm-sequoia-devel
Red Hat:enterprise_linux:10.2
before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-sequoia-sqv
Red Hat:enterprise_linux:10.2
before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
rust-sequoia-sqv-debugsource
Red Hat:enterprise_linux:10.2
before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
sequoia-sqv
Red Hat:enterprise_linux:10.2
before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
sequoia-sqv-debuginfo
Red Hat:enterprise_linux:10.2
before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
rust-sequoia-sq
Red Hat:enterprise_linux:10.2
before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
rust-sequoia-sq-debugsource
Red Hat:enterprise_linux:10.2
before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
sequoia-sq
Red Hat:enterprise_linux:10.2
before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
sequoia-sq-debuginfo
Red Hat:enterprise_linux:10.2
before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
rpm-sequoia
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:1.10.3-0.3.hum1
0:1.10.3-0.3.hum1
rpm-sequoia-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:1.10.3-0.3.hum1
0:1.10.3-0.3.hum1
rust-rpm-sequoia
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:1.10.3-0.3.hum1
0:1.10.3-0.3.hum1
rpm-sequoia
Red Hat:enterprise_linux_eus:10.0
before 0:1.6.0-6.el10_0.7
0:1.6.0-6.el10_0.7
rpm-sequoia-debuginfo
Red Hat:enterprise_linux_eus:10.0
before 0:1.6.0-6.el10_0.7
0:1.6.0-6.el10_0.7
rust-rpm-sequoia
Red Hat:enterprise_linux_eus:10.0
before 0:1.6.0-6.el10_0.7
0:1.6.0-6.el10_0.7
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux_eus:10.0
before 0:1.6.0-6.el10_0.7
0:1.6.0-6.el10_0.7
python-pysequoia
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:0.1.35-1.el8pc
0:0.1.35-1.el8pc
python3.11-pysequoia
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:0.1.35-1.el8pc
0:0.1.35-1.el8pc
python-pysequoia
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:0.1.35-1.el8pc
0:0.1.35-1.el8pc
python3.11-pysequoia
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:0.1.35-1.el8pc
0:0.1.35-1.el8pc
python-pysequoia
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:0.1.35-1.el9pc
0:0.1.35-1.el9pc
python3.11-pysequoia
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:0.1.35-1.el9pc
0:0.1.35-1.el9pc
python-pysequoia
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:0.1.35-1.el9pc
0:0.1.35-1.el9pc
python3.11-pysequoia
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:0.1.35-1.el9pc
0:0.1.35-1.el9pc
rubygem-crass
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:1.0.8-1.el8sat
0:1.0.8-1.el8sat
rubygem-crass
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:1.0.8-1.el9sat
0:1.0.8-1.el9sat
rubygem-puma
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:6.4.3-2.el8sat
0:6.4.3-2.el8sat
rubygem-puma-debuginfo
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:6.4.3-2.el8sat
0:6.4.3-2.el8sat
rubygem-puma-debugsource
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:6.4.3-2.el8sat
0:6.4.3-2.el8sat
rubygem-puma
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:6.4.3-2.el9sat
0:6.4.3-2.el9sat
rubygem-puma-debuginfo
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:6.4.3-2.el9sat
0:6.4.3-2.el9sat
rubygem-puma-debugsource
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:6.4.3-2.el9sat
0:6.4.3-2.el9sat
foreman
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-pcp
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman
Red Hat:satellite_utils:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-cli
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-debug
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-ec2
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-journald
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-libvirt
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-openstack
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-ovirt
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-pcp
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-postgresql
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-redis
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-service
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-telemetry
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman-vmware
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el8sat
0:3.12.0.26-1.el8sat
foreman
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman
Red Hat:satellite_utils:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-cli
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-debug
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-ec2
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-journald
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-libvirt
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-openstack
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-ovirt
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-pcp
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-postgresql
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-redis
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-service
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-telemetry
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
foreman-vmware
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.12.0.26-1.el9sat
0:3.12.0.26-1.el9sat
rubygem-katello
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:4.14.0.24-1.el8sat
0:4.14.0.24-1.el8sat
rubygem-katello
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:4.14.0.24-1.el9sat
0:4.14.0.24-1.el9sat
python-pulpcore
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.49.39-5.el8pc
0:3.49.39-5.el8pc
python3.11-pulpcore
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.49.39-5.el8pc
0:3.49.39-5.el8pc
python-pulpcore
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.49.39-5.el8pc
0:3.49.39-5.el8pc
python3.11-pulpcore
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.49.39-5.el8pc
0:3.49.39-5.el8pc
python-pulpcore
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:3.49.39-5.el9pc
0:3.49.39-5.el9pc
python3.11-pulpcore
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:3.49.39-5.el9pc
0:3.49.39-5.el9pc
python-pulpcore
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.49.39-5.el9pc
0:3.49.39-5.el9pc
python3.11-pulpcore
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:3.49.39-5.el9pc
0:3.49.39-5.el9pc
python-pyjwt
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:2.15.1-1.el8pc
0:2.15.1-1.el8pc
python3.11-pyjwt+crypto
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:2.15.1-1.el8pc
0:2.15.1-1.el8pc
python3.11-pyjwt
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:2.15.1-1.el8pc
0:2.15.1-1.el8pc
python-pyjwt
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:2.15.1-1.el8pc
0:2.15.1-1.el8pc
python3.11-pyjwt+crypto
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:2.15.1-1.el8pc
0:2.15.1-1.el8pc
python3.11-pyjwt
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:2.15.1-1.el8pc
0:2.15.1-1.el8pc
python-pyjwt
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python3.11-pyjwt+crypto
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python3.11-pyjwt
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python-pyjwt
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python3.11-pyjwt+crypto
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python3.11-pyjwt
Red Hat:satellite:6.16::el9
From an advisory covering 21 CVEs
before 0:2.15.1-1.el9pc
0:2.15.1-1.el9pc
python-pulp-rpm
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.26.9-1.el8pc
0:3.26.9-1.el8pc
python3.11-pulp-rpm
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 21 CVEs
before 0:3.26.9-1.el8pc
0:3.26.9-1.el8pc
python-pulp-rpm
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.26.9-1.el8pc
0:3.26.9-1.el8pc
python3.11-pulp-rpm
Red Hat:satellite:6.16::el8
From an advisory covering 21 CVEs
before 0:3.26.9-1.el8pc
0:3.26.9-1.el8pc
python-pulp-rpm
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 21 CVEs
before 0:3.26.9-1.el9pc
0:3.26.9-1.el9pc
rust-rpm-sequoia
Rocky Linux:9
before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia
Rocky Linux:10
before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-sequoia-sqv
Rocky Linux:10
before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
rust-sequoia-sq
Rocky Linux:10
before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
rust-sequoia-openpgp
Ubuntu:22.04:LTS
All versions, plus listed versions
1.1.0-31.3.0-41.7.0-6
None known
rust-sequoia-openpgp
Ubuntu:24.04:LTS
All versions, plus listed versions
1.16.0-11.17.0-11.17.0-21.18.0-11.19.0-11.19.0-1build1
None known
rust-sequoia-openpgp
Ubuntu:25.10
All versions, plus listed versions
1.22.0-12.0.0-2
None known
rust-sequoia-openpgp
Ubuntu:26.10
All versions, plus listed versions
2.2.0-12.3.0-1
None known
rust-sequoia-openpgp
Ubuntu:26.04:LTS
All versions, plus listed versions
2.0.0-22.0.0-52.1.0-12.1.0-22.1.0-32.2.0-1
None known

What each source reports

CVE List Score used7.4

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness
CWE-347
Updated
2026-11-13
EUVDEUVD-2026-808887.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
EUVD-2026-80888
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
GitHub AdvisoriesGHSA-g33h-rrj9-75qv7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older...

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
GHSA-g33h-rrj9-75qv
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness
CWE-347
Updated
2026-11-13
NVD7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness
CWE-347
Updated
2026-11-13
OSVDEBIAN-CVE-2026-427847.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
DEBIAN-CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-11
OSVRHSA-2026:1001209.6

Red Hat Security Advisory: Satellite 6.19.6 Async Update

Record
RHSA-2026:100120
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-13
Show 22 moreShow less
OSVRHSA-2026:341608.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Record
RHSA-2026:34160
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:420789.0

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Record
RHSA-2026:42078
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Updated
2026-11-13
OSVRHSA-2026:429027.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:42902
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:767337.4

Red Hat Security Advisory: rust-rpm-sequoia security update

Record
RHSA-2026:76733
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:767347.4

Red Hat Security Advisory: rust-rpm-sequoia security, bug fix, and enhancement update

Record
RHSA-2026:76734
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:767357.4

Red Hat Security Advisory: rust-sequoia-sqv security update

Record
RHSA-2026:76735
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:767377.4

Red Hat Security Advisory: rust-sequoia-sq security, bug fix, and enhancement update

Record
RHSA-2026:76737
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:947917.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:94791
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:982487.4

Red Hat Security Advisory: rust-rpm-sequoia security update

Record
RHSA-2026:98248
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:999499.6

Red Hat Security Advisory: Satellite 6.16.15 Async Update

Record
RHSA-2026:99949
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:999509.6

Red Hat Security Advisory: Satellite 6.17.13 Async Update

Record
RHSA-2026:99950
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2026:999529.6

Red Hat Security Advisory: Satellite 6.18.11 Async Update

Record
RHSA-2026:99952
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-13
OSVRLSA-2026:767337.4

Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76733
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:767347.4

Important: rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Uninformative error message on --import failure [rhel-10.2.z] (JIRA:Rocky Linux-176906)

  • Return NotTrusted importing non-allowed keys [rhel-10.2.z] (JIRA:Rocky Linux-176907)

  • [FTBFS] Update bindgen for LLVM 22 compatibility [rhel-10.2.z] (JIRA:Rocky Linux-176908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76734
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:767357.4

Important: rust-sequoia-sqv security update

A simple OpenPGP signature verification program.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76735
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:767377.4

Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Unbundle capnproto from sequoia-sq [rhel-10.2.z] (JIRA:Rocky Linux-177547)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76737
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-427847.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
UBUNTU-CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2026:76733No score

Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76733
Updated
2026-11-02
OSVALSA-2026:76734No score

Important: rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Uninformative error message on --import failure [almalinux-10.2.z] (JIRA:AlmaLinux-176906)
  • Return NotTrusted importing non-allowed keys [almalinux-10.2.z] (JIRA:AlmaLinux-176907)
  • [FTBFS] Update bindgen for LLVM 22 compatibility [almalinux-10.2.z] (JIRA:AlmaLinux-176908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76734
Updated
2026-11-02
OSVALSA-2026:76735No score

Important: rust-sequoia-sqv security update

A simple OpenPGP signature verification program.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76735
Updated
2026-11-02
OSVALSA-2026:76737No score

Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Unbundle capnproto from sequoia-sq [almalinux-10.2.z] (JIRA:AlmaLinux-177547)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76737
Updated
2026-11-02
OSVAZL-105170No score

CVE-2026-42784 affecting package kata-containers-cc for versions less than 3.15.0.aks0-23

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
AZL-105170
Updated
2026-11-05

History

History
RecordedChangedSources
affected, aliases, referencesEUVD, GitHub Advisories, NVD, OSV
products, referencesCVE List
referencesEUVD, GitHub Advisories, NVD, OSV
products, referencesCVE List, EUVD, NVD
affectedCVE List, EUVD, GitHub Advisories, NVD, OSV
referencesCVE List
factsCVE List, EUVD, NVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 110 package rows and 150 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open