Description (CNA)
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Ansible Automation Platform 2.6 for RHEL 9 | unaffected 0:0.1.34-1.el9ap before * |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:1.10.2.1-1.el10_2 before * |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:1.3.0.2-1.el10_2 before * |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:1.4.0.1-2.el10_2 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:1.10.2.1-1.el9_8 before * |
| Red Hat / Red Hat Cost Management On-Premise 1 | unaffected 1791460851 before * |
| Red Hat / Red Hat Hardened Images | unaffected 0.3.2-4.hum1 before * |
| Red Hat / Confidential Compute Attestation | affected |
| Red Hat / Confidential Compute Attestation | affected |
| Red Hat / Confidential Compute Attestation | affected |
| Red Hat / Confidential Compute Attestation | affected |
| Red Hat / Confidential Compute Attestation | affected |
| Red Hat / Red Hat Ansible Automation Platform 2 | affected |
| Red Hat / Red Hat Ansible Automation Platform 2 | affected |
| Red Hat / Red Hat Enterprise Linux 10 | affected |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected |
| Red Hat / Red Hat Enterprise Linux 10 | affected |
| Red Hat / Red Hat Enterprise Linux 9 | affected |
| Red Hat / Red Hat Hardened Images | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat Satellite 6 | affected |
| Red Hat / Red Hat Satellite 6 | affected |
| Red Hat / Red Hat Trusted Profile Analyzer | affected |
| Red Hat / Red Hat Trusted Profile Analyzer | unaffected |
CWE
CWE-347
References
- https://access.redhat.com/errata/RHSA-2026:34160
- https://access.redhat.com/errata/RHSA-2026:42078
- https://access.redhat.com/errata/RHSA-2026:42902
- https://access.redhat.com/errata/RHSA-2026:76733
- https://access.redhat.com/errata/RHSA-2026:76734
- https://access.redhat.com/errata/RHSA-2026:76735
- https://access.redhat.com/errata/RHSA-2026:76737
- https://access.redhat.com/errata/RHSA-2026:79357
- https://access.redhat.com/security/cve/CVE-2026-42784
- https://bugzilla.redhat.com/show_bug.cgi?id=2464122
ADP enrichment
No English description supplied.
No references supplied.