1694 matches found
PT-2026-57131
The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintaine...
sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
Astra Linux – Vulnerability in Thunderbird
When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email, which was formatted and styled using HTML and CSS, the decrypted contents were displayed in a context where the CSS styles from the outer messages remained active. If...
OESA-2026-2637 libsolv security update
A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: Security Fixes: A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when...
[SECURITY] Fedora 44 Update: rust-sequoia-sop-0.37.3-4.fc44
An implementation of the Stateless OpenPGP Interface using Sequoia...
ROOT-APP-NPM-CVE-2025-47934 CVE-2025-47934 in @rootio/openpgp - Patched by Root
Root has patched CVE-2025-47934 in the @rootio/openpgp package for Root:npm. Multiple fixed versions available...
[SECURITY] Fedora 43 Update: rust-sequoia-openpgp-2.3.0-1.fc43
OpenPGP data types and associated machinery...
[SECURITY] Fedora 42 Update: rust-sequoia-sop-0.37.3-3.fc42
An implementation of the Stateless OpenPGP Interface using Sequoia...
[SECURITY] Fedora 42 Update: rust-sequoia-openpgp-2.3.0-1.fc42
OpenPGP data types and associated machinery...
Fedora 42 : rust-rpm-sequoia / rust-sequoia-chameleon-gnupg / rust-sequoia-git / etc (2026-8df732be8a)
The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-8df732be8a advisory. Update sequoia-openpgp to version 2.3.0. This includes three security relevant fixes assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-...
Fedora 43 : rust-rpm-sequoia / rust-sequoia-chameleon-gnupg / rust-sequoia-git / etc (2026-38d57d2e7a)
The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-38d57d2e7a advisory. Update sequoia-openpgp to version 2.3.0. This includes three security relevant fixes assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-...
Linux Distros Unpatched Vulnerability : CVE-2026-42783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Update sequoia-openpgp to version 2.3.0. This includes three security relevant fixes assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet, see...
Linux Distros Unpatched Vulnerability : CVE-2026-42784
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a...
PT-2026-45145
openpgp: Dont imply missing key flags from key type...
UBUNTU-CVE-2026-42783
openpgp: Dont imply missing key flags from key type...
CVE-2026-42783
openpgp: Dont imply missing key flags from key type...
PT-2026-45223
Name of the Vulnerable Software and Affected Versions sequoia-openpgp affected versions not specified Description A flaw exists where the library incorrectly infers key flags for older certificates when a key flags subpacket is missing. This discrepancy in key capability perception allows an...
Fedora 44 : rust-podman-sequoia / rust-rpm-sequoia / etc (2026-5619c60e85)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-5619c60e85 advisory. Update sequoia-openpgp to version 2.3.0. This includes three security relevant fixes assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-...
CentOS 9 : rust-rpm-sequoia-1.10.2.1-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the rust- rpm-sequoia-1.10.2.1-1.el9 build changelog. - Update sequoia-openpgp to version 2.3.0. This includes three security relevant fixes assigned CVE-2026-42783, CVE-2026-42784, and...