openSUSE-RU-2026:21658-1

openSUSE-RU-2026:21658-1 · Recommended update for sequoia-sq

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only * LICENSE.txt confirms it * Correct Legal-Review-Notice usage - Update dependencies due to security issues (CVE-2026-25541 bsc#1274437) - Switch crypto backend from nettle to openssl (bsc#1257934) - Update to version 1.4.0: * Release v1.4.0. * Update crossbeam-epoch. * Enable optimizations when building rust-crypto crates. * tool: canonicalize Ord and PartialOrd impls for Association * tool: silence clippy error for potentially mutable Map key types * tool: fix formatting to avoid leaking comments into doc strings * clippy: allow two types with interior mutability for BTreeSet keys * lib: avoid potentially panicking integer cast * clippy: add default lint configuration * Update NEWS. * lib: Improve control char escaping * tool: Fix output file's permissions. * Gracefully deal with 404 HTTP result codes * tool: Don't panic if write fails * tool: Restrict file permissions on sensitive output * Improve temporary file handling. * Forward allow-* crypto features. * Relax rusqlite dependency. * tool: Add more cipher suites. * tool: Add sq key generate --{encryption,signing}-algorithm. * Update Cargo.lock. * Relax subplot dependency. * Relax roff dependency. * Relax toml_edit dependency. * Upgrade sequoia-wot. * Relax indicatif dependency. * Relax gethostname dependency. * Relax dirs dependency. * Relax clap_lex dependency. * Update Cargo.lock. * meta: Bump MSRV to 1.85. * Update signing policy. - Update vendored dependencies due to security and build issues - Update to version 1.3.1: * Release 1.3.1. * Fix formatting. * Improve documentation of `sq config`. * Emit hints to mark an imported key as authenticated or introducer. * Hedge against importing keys into the cert store. * Improve displaying of preferred user IDs. * Fix typo. * Display backtraces attached to errors. * tests: Avoid DSA key in tests as DSA will be rejected in the future. * tests: Update PKI test vectors to not expire. * Enable backtraces and tracing when running tests. * Make importing Autocrypt certs more robust. * Release 1.3.0. * Make sq config get print to stdout. * Fix early abort in sq keyring filter * Fix test sq_verify_policy_as_of_relative_time * Fix error message. * Prefix matching for --...-self parameters fixed * Fix examples. * Port to sequoia-openpgp 2. * ci: Always build the pages, but only publish when merging to main. * Upgrade sequoia-man. * Split out the man page generation into a new crate. * Update openssl to address RUSTSEC-2025-0004. * Update hickory-proto to address RUSTSEC-2025-0006. * man: Fix NAME section for subcommands. - Update to version 1.2.0: * Release 1.2.0. * Update Cargo.lock. * Use authenticated identifiers in sq verify. * Improve quoting. * Improve sq download's output. * Add a parameter to the authenticate function to control the output. * Move helper function to common. * Add a mechanism to replace an argument in a hint with a placeholder. * Avoid crash parsing arguments to Strings. * Make sq cert lint less quiet when there are no issues. * Add sq key rotate. * Extend replay to optionally take a signer. * tests: Move utility function to the common module. * Move function to the common module. * Extend replay to allow the caller to limit what is replayed. * Improve output. * Allow the caller to specify an indentation level. * Disable tracing. * Fix test helper function. * Add sq pki vouch replay. * Move certification listing code to the common module. * Move code in common to the sole function that uses it. * Move the sq pki link list implement to its own module. * Extend sq pki vouch list to list certifications of a certificate. * Improve test. * Simplify specifying certificate designators in tests. * Require that certificate designators are authenticated. * Use an explicit type for the trust amount parameter. * Fix sq --cli-version. * Improve sq pki link list's help text. * Improve error messages. * Avoid unnecessary lookups. * Relax sq pki link list's certificate designators. * Fix examples. * Don't export non-exportable sigs and components when exporting keys. * Add missing NEWS entry. * Fix duplicating packets when dumping. * Prevent monomorphization of Sq::resolve_cert. * Prevent monomorphization of Sq::resolve_certs_filter. * Add new command sq pki vouch list. * Move the code for listing certification to common. * Release 1.1.0. * Relax subplot dependency. * Relax rusqlite dependency. * Update Cargo.lock. * Fix output. * Add a lint for uncertified user IDs. * Show certificates without user IDs with --gossip. * Improve sq cert list's documentation. * Improve help text lints. * Fix long help generation for cert designators. * Update NEWS file. * Add option --unusable to sq cert list, etc. * Show hints about unusable bindings when --gossip is provided. * Change how we refer to unusable bindings in sq cert list. * Change sq cert list to not show warnings if --quiet is given. * Distinguish unauthenticated and invalid bindings in sq cert list. * Improve linting for sq cert list. * Don't list revoke user IDs. * Fix listing certificates by fingerprint or key ID. * Remove duplicate code. * Rework sq cert list's human readable output. * Improve UserIDDesignator::argument_value. * Fix UserIDDesignator::argument_value. * Add some helper functions. * tests: Add tests for sq cert list. * Fix sq cert list --gossip. * Fix output. * Release 1.0.0. * Fix NEWS. * Align `sq download` with `sq verify`. * Fix displaying preferred user IDs. * Write to temporary file first, then persist it under the final name. * Avoid using absolute paths in name of scratch files. * Automatically import certificates from GnuPG's certificate store. * Escape user IDs. * Escape preferred keyserver and policy URI. * Escape notation name and data. * Escape literal data file name and data prefix. * Escape all regular expressions. * Escape all reason for revocation messages. * Improve output sanitization. * Use the visual idiom for cert,userid pairs authenticating downloads. * Use the visual idiom for cert, userid pairs when decrypting. * Use the visual idiom for cert, userid pairs when importing revs. * Use the visual idiom for cert, userid pairs when certifying. * Improve argument and value formatting in hints. * Improve help output. * Revert "Refine sq pki {authenticate,lookup}'s user ID designators." * Fix commands embedded in the documentation. * Make verifying detached signatures more efficient. * Require sequoia-openpgp 1.22. * Fix hint. * Refine sq key userid revoke's user ID designators. * Refine sq pki vouch {add,authorize}'s user ID designators. * Refine sq pki {authenticate,lookup}'s user ID designators. * Refine sq pki link retract's user ID designators. * Refine sq pki link {add,authorize}'s user ID designators. * Add sq pki path --userid-by-email. * Gracefully handle unencrypted Autocrypt messages. * Align output emitted when importing certificates. * Don't unconditionally show provenance messages. * Fix importing unencrypted Autocrypt messages. * Improve error handling opening the cert store. * Do not hide errors from keyrings in verify. * Refactor packet and keyring files in /cli to new example framework. * Refactor files in /cli/network to new example framework. * Refactor files in /cli/pki to new example framework. * Refactor files in /cli to new example framework. * Remove the unstable CLI warning. * Don't make impossible recommendations. * Remove useless code. * Disable the --name and --add-name arguments. * Rename --userid-or-add to --add-userid, etc. * Extend and

Correctif disponible

Publication

2026-08-25T18:07:43Z

Mise à jour

2026-08-27T18:23:12.278447922Z

Pile logicielle: system

Vérifiez votre serveur →