https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:34:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373964 EUVD-2026-373964 https://cve.radiocsirt.org/vuln/euvd-2026-373964 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42784 <p>A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.</p> <p>A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42784 https://cve.radiocsirt.org/vuln/ghsa-g33h-rrj9-75qv <p>A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.</p> <p>A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-g33h-rrj9-75qv https://cve.radiocsirt.org/vuln/msrc_cve-2026-42784 msrc_CVE-2026-42784 https://cve.radiocsirt.org/vuln/msrc_cve-2026-42784 https://cve.radiocsirt.org/vuln/rhsa-2026:42902 <p>sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion</p> <p>sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion</p> https://cve.radiocsirt.org/vuln/rhsa-2026:42902 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42784 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: rust-sequoia-openpgp, Ubuntu:24.04:LTS: rust-sequoia-openpgp, Ubuntu:25.10: rust-sequoia-openpgp, Ubuntu:26.04:LTS: rust-sequoia-openpgp</p> <p>A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: rust-sequoia-openpgp, Ubuntu:24.04:LTS: rust-sequoia-openpgp, Ubuntu:25.10: rust-sequoia-openpgp, Ubuntu:26.04:LTS: rust-sequoia-openpgp</p> <p>A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42784