Heist/ feed

Security feed

advisoryOfficial CVE List

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Red Hat Ansible Automation Platform 2.6 for RHEL 9Red Hat Enterprise Linux 10Red Hat Enterprise Linux 10Red Hat Enterprise Linux 10Red Hat Enterprise Linux 9Red Hat Cost Management On-Premise 1Red Hat Hardened ImagesConfidential Compute AttestationConfidential Compute AttestationConfidential Compute AttestationConfidential Compute AttestationConfidential Compute AttestationRed Hat Ansible Automation Platform 2Red Hat Ansible Automation Platform 2Red Hat Enterprise Linux 10Red Hat Enterprise Linux 10Red Hat Enterprise Linux 10Red Hat Enterprise Linux 9Red Hat Hardened ImagesRed Hat OpenShift Container Platform 4Red Hat Satellite 6Red Hat Satellite 6Red Hat Trusted Profile AnalyzerRed Hat Trusted Profile AnalyzerCVE-2026-42784
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-42784

Red Hat Ansible Automation Platform 2.6 for RHEL 9

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Cost Management On-Premise 1

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Confidential Compute Attestation

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Confidential Compute Attestation

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Confidential Compute Attestation

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Confidential Compute Attestation

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Confidential Compute Attestation

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Ansible Automation Platform 2

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Ansible Automation Platform 2

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Satellite 6

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Satellite 6

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Trusted Profile Analyzer

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Trusted Profile Analyzer

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2026-42784

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#28829 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement