Security Check
Zurück zum Feed
Hoch 7.4Linux-Server

CVE-2026-42784

Red Hat Enterprise Linux (sequoia-openpgp, perl-DBI): Mehrere Schwachstellen

Amazon Linux 2, Red Hat Enterprise Linux, RESF Rocky Linux, SUSE Linux, SUSE openSUSE, Oracle Linux

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

16. Sep 2026

Original bei Red Hat öffnen

Ausgewertete Quellen