openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:22132-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-RU-2026:22132-1 advisory. Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a...

rust-sequoia-sq security update

An update is available for rust-sequoia-sq. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Command-line frontends for Sequoia. Security Fixes: hickory-resolver...

Oracle Linux 10 : rust-sequoia-sq (ELSA-2026-85848)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-85848 advisory. - Fix CVE-2026-93657 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

AlmaLinux 10 : rust-sequoia-sq (ALSA-2026:85848)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:85848 advisory. hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records CVE-2026-93657 rustls-webpki: rustls-webpki: Denial of Service vi...

Important: Red Hat Security Advisory: rust-sequoia-sq security update

An update for rust-sequoia-sq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

RHEL 10 : rust-sequoia-sq (RHSA-2026:85848)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:85848 advisory. Command-line frontends for Sequoia. Security Fixes: hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records...

rust-sequoia-sq security update

1.4.0.1-4.0.1 - Put 'Requires' openssl-libs in correct placeholder Orabug: 38742109 - Hard require needed openssl-libs Orabug: 38742109 1.4.0.1-4 - Fix CVE-2026-93657 1.4.0.1-3 - Fix CVE-2026-93599...

OPENSUSE-RU-2026:22132-1 Recommended update for sequoia-sq

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a version for the sqz dependency. Enable optimizations when building rust-crypto crates. Update NEWS...

PT-2026-120331

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a version for the sqz dependency. Enable optimizations when building rust-crypto crates. Update NEWS...

kernel: nvmet-auth: Synchronize timeout work during SQ teardown

A flaw was found in the nvmet-auth component of the Linux kernel. A timing issue during the cleanup of a Submission Queue SQ can lead to a use-after-free vulnerability. This occurs when a delayed authentication task attempts to access memory that has already been released or repurposed. An attack...

kernel: nvmet-auth: Synchronize timeout work during SQ teardown

A flaw was found in the nvmet-auth component of the Linux kernel. A timing issue during the cleanup of a Submission Queue SQ can lead to a use-after-free vulnerability. This occurs when a delayed authentication task attempts to access memory that has already been released or repurposed. An attack...

rust-sequoia-sq security, bug fix, and enhancement update

1.4.0.1-2.0.1 - Put 'Requires' openssl-libs in correct placeholder Orabug: 38742109 - Hard require needed openssl-libs Orabug: 38742109 1.4.0.1-2 - Introduce alias for ML-DSA keys during key generation 1.4.0.1-1 - Update to 1.4.0 and fix CVE-2026-42784 1.3.1.1-2 - Remove bundled capnproto...

Oracle Linux 10 : rust-sequoia-sq (ELSA-2026-76737)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-76737 advisory. - Update to 1.4.0 and fix CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RLSA-2026:76737 Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from sequoia-sq rhel-10.2.z JIRA:Rocky Linux-177547 For more details about the security...

rust-sequoia-sq security, bug fix, and enhancement update

An update is available for rust-sequoia-sq. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Command-line frontends for Sequoia. Security Fixes: sequoia-openpgp:...

Important: Red Hat Security Advisory: rust-sequoia-sq security, bug fix, and enhancement update

An update for rust-sequoia-sq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

DEBIAN-CVE-2026-89970

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmetauthsqfree cancels authexpiredwork with canceldelayedwork. If the work has already started, cancellation does not wait for the callback. Transport teardown can...

AZL-101460 CVE-2026-89970 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmetauthsqfree cancels authexpiredwork with canceldelayedwork. If the work has already started, cancellation does not wait for the callback. Transport teardown can...

CVE-2026-89970

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmetauthsqfree cancels authexpiredwork with canceldelayedwork. If the work has already started, cancellation does not wait for the callback. Transport teardown can...

CVE-2026-89970

CVE-2026-89970 is a use-after-free vulnerability in the Linux kernel NVMe Target (nvmet) authentication subsystem. During Submission Queue (SQ) teardown, nvmet_auth_sq_free() uses cancel_delayed_work() to stop auth_expired_work, but if the work has already started, cancellation does not wait for ...