Red Hat Security Advisory

RHSA-2026:85848

rust-sequoia-sq security update

Released 2026-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) rust-sequoia-sq-1.4.0.1-4.el10_2, sequoia-sq-1.4.0.1-4.el10_2

Fixes 2 records

TI-2026-63063 CVE-2026-93599 · GHSA-g42g-9vm4-7gfj

rustls-webpki before 0.103.13 Panic via empty BIT STRING

HIGH 77

rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00346 Published 2026-09-18 Partial fix · 0.103.13, 0.104.0-alpha.7 CWE-191

TI-2026-63089 CVE-2026-93657 · GHSA-884w-h442-q7ph

hickory-resolver before 0.26.2 DNSSEC Validation Bypass

MEDIUM 43

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be returned as successful results.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00231 Published 2026-09-18 Partial fix · 0.26.2 CWE-347