{"id":"CVE-2026-42783","aliases":["DEBIAN-CVE-2026-42783","UBUNTU-CVE-2026-42783"],"status":"published","description":"[openpgp: Don\u0026#x27;t imply missing key flags from key type]","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-05-21T00:00:00Z","modified":"2026-10-17T12:58:16Z","fixes":[{"ecosystem":"Debian:14","package":"rust-sequoia-openpgp","fixed_in":["2.2.0-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.0-2","1.13.0-1","1.16.0-1","1.16.0-2","1.16.0-3","1.16.1-1","1.16.1-2","1.17.0-1","1.17.0-2","1.18.0-1","1.19.0-1","1.20.0-1","1.20.0-2","1.21.0-1","1.21.1-1","1.21.1-2","1.21.2-1","1.21.2-2","1.22.0-1","1.22.0-2","2.0.0-1","2.0.0-2","2.0.0-3","2.0.0-4","2.0.0-5","2.1.0-1","2.1.0-2","2.1.0-3","2.2.0-1","2.2.0-2","2.3.0-1","2.4.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.0-2","2.0.0-2+deb13u1","2.0.0-3","2.0.0-4","2.0.0-5","2.1.0-1","2.1.0-2","2.1.0-3","2.2.0-1","2.2.0-2","2.3.0-1","2.4.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2"}]}],"versions":["2.0.0-2","2.0.0-3","2.0.0-4","2.0.0-5","2.1.0-1","2.1.0-2","2.1.0-3","2.2.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0-3","1.3.0-4","1.7.0-6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.0-1","1.17.0-1","1.17.0-2","1.18.0-1","1.19.0-1","1.19.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22.0-1","2.0.0-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.0-1","2.3.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rust-sequoia-openpgp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.0-2","2.0.0-5","2.1.0-1","2.1.0-2","2.1.0-3","2.2.0-1"]}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42783","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-42783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42783","tags":["report"]}],"sources":{"osv":[{"id":"DEBIAN-CVE-2026-42783","status":"published","published":"2026-05-21T15:48:11.751971827Z","modified":"2026-09-01T15:06:04.159754646Z","updated_at":"2026-11-02T15:45:55.251751Z"},{"id":"UBUNTU-CVE-2026-42783","description":"[openpgp: Don\u0026#x27;t imply missing key flags from key type]","status":"published","published":"2026-05-21T00:00:00Z","modified":"2026-10-17T12:58:16.910834422Z","updated_at":"2026-11-02T16:56:18.393417Z"}]}}