[Apollo] Advisories Statistics light light Login

RLSA-2026:76734

Security Mirrored from RHSA-2026:76734
Issued at: 2026-10-06
Updated at: 2026-10-12

Advisory content derived from Red Hat RHSA-2026:76734, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: rust-rpm-sequoia security, bug fix, and enhancement update



Description

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

* sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

* Uninformative error message on --import failure [rhel-10.2.z] (JIRA:Rocky Linux-176906)

* Return NotTrusted importing non-allowed keys [rhel-10.2.z] (JIRA:Rocky Linux-176907)

* [FTBFS] Update bindgen for LLVM 22 compatibility [rhel-10.2.z] (JIRA:Rocky Linux-176908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 10 riscv64 Rocky Linux 10 x86_64 Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 s390x

Fixes

2464122

CVEs

CVE-2026-42784

Affected packages

Rocky Linux 10 riscv64 - CRB

rpm-sequoia-devel-0:1.10.2.1-1.el10_2.riscv64.rpm

Rocky Linux 10 x86_64 - CRB

rpm-sequoia-devel-0:1.10.2.1-1.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - CRB

rpm-sequoia-devel-0:1.10.2.1-1.el10_2.aarch64.rpm

Rocky Linux 10 ppc64le - CRB

rpm-sequoia-devel-0:1.10.2.1-1.el10_2.ppc64le.rpm

Rocky Linux 10 s390x - CRB

rpm-sequoia-devel-0:1.10.2.1-1.el10_2.s390x.rpm

Rocky Linux 10 riscv64 - BaseOS

rpm-sequoia-debuginfo-0:1.10.2.1-1.el10_2.riscv64.rpm rpm-sequoia-0:1.10.2.1-1.el10_2.riscv64.rpm rust-rpm-sequoia-debugsource-0:1.10.2.1-1.el10_2.riscv64.rpm rust-rpm-sequoia-0:1.10.2.1-1.el10_2.src.rpm

Rocky Linux 10 x86_64 - BaseOS

rpm-sequoia-debuginfo-0:1.10.2.1-1.el10_2.x86_64.rpm rpm-sequoia-0:1.10.2.1-1.el10_2.x86_64.rpm rust-rpm-sequoia-debugsource-0:1.10.2.1-1.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - BaseOS

rpm-sequoia-debuginfo-0:1.10.2.1-1.el10_2.aarch64.rpm rpm-sequoia-0:1.10.2.1-1.el10_2.aarch64.rpm rust-rpm-sequoia-debugsource-0:1.10.2.1-1.el10_2.aarch64.rpm

Rocky Linux 10 ppc64le - BaseOS

rpm-sequoia-debuginfo-0:1.10.2.1-1.el10_2.ppc64le.rpm rpm-sequoia-0:1.10.2.1-1.el10_2.ppc64le.rpm rust-rpm-sequoia-debugsource-0:1.10.2.1-1.el10_2.ppc64le.rpm

Rocky Linux 10 s390x - BaseOS

rpm-sequoia-debuginfo-0:1.10.2.1-1.el10_2.s390x.rpm rpm-sequoia-0:1.10.2.1-1.el10_2.s390x.rpm rust-rpm-sequoia-debugsource-0:1.10.2.1-1.el10_2.s390x.rpm