openSUSE-RU-2026:21658-1

openSUSE-RU-2026:21658-1 · Recommended update for sequoia-sq

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only * LICENSE.txt confirms it * Correct Legal-Review-Notice usage - Update dependencies due to security issues (CVE-2026-25541 bsc#1274437) - Switch crypto backend from nettle to openssl (bsc#1257934) - Update to version 1.4.0: * Release v1.4.0. * Update crossbeam-epoch. * Enable optimizations when building rust-crypto crates. * tool: canonicalize Ord and PartialOrd impls for Association * tool: silence clippy error for potentially mutable Map key types * tool: fix formatting to avoid leaking comments into doc strings * clippy: allow two types with interior mutability for BTreeSet keys * lib: avoid potentially panicking integer cast * clippy: add default lint configuration * Update NEWS. * lib: Improve control char escaping * tool: Fix output file's permissions. * Gracefully deal with 404 HTTP result codes * tool: Don't panic if write fails * tool: Restrict file permissions on sensitive output * Improve temporary file handling. * Forward allow-* crypto features. * Relax rusqlite dependency. * tool: Add more cipher suites. * tool: Add sq key generate --{encryption,signing}-algorithm. * Update Cargo.lock. * Relax subplot dependency. * Relax roff dependency. * Relax toml_edit dependency. * Upgrade sequoia-wot. * Relax indicatif dependency. * Relax gethostname dependency. * Relax dirs dependency. * Relax clap_lex dependency. * Update Cargo.lock. * meta: Bump MSRV to 1.85. * Update signing policy. - Update vendored dependencies due to security and build issues - Update to version 1.3.1: * Release 1.3.1. * Fix formatting. * Improve documentation of `sq config`. * Emit hints to mark an imported key as authenticated or introducer. * Hedge against importing keys into the cert store. * Improve displaying of preferred user IDs. * Fix typo. * Display backtraces attached to errors. * tests: Avoid DSA key in tests as DSA will be rejected in the future. * tests: Update PKI test vectors to not expire. * Enable backtraces and tracing when running tests. * Make importing Autocrypt certs more robust. * Release 1.3.0. * Make sq config get print to stdout. * Fix early abort in sq keyring filter * Fix test sq_verify_policy_as_of_relative_time * Fix error message. * Prefix matching for --...-self parameters fixed * Fix examples. * Port to sequoia-openpgp 2. * ci: Always build the pages, but only publish when merging to main. * Upgrade sequoia-man. * Split out the man page generation into a new crate. * Update openssl to address RUSTSEC-2025-0004. * Update hickory-proto to address RUSTSEC-2025-0006. * man: Fix NAME section for subcommands. - Update to version 1.2.0: * Release 1.2.0. * Update Cargo.lock. * Use authenticated identifiers in sq verify. * Improve quoting. * Improve sq download's output. * Add a parameter to the authenticate function to control the output. * Move helper function to common. * Add a mechanism to replace an argument in a hint with a placeholder. * Avoid crash parsing arguments to Strings. * Make sq cert lint less quiet when there are no issues. * Add sq key rotate. * Extend replay to optionally take a signer. * tests: Move utility function to the common module. * Move function to the common module. * Extend replay to allow the caller to limit what is replayed. * Improve output. * Allow the caller to specify an indentation level. * Disable tracing. * Fix test helper function. * Add sq pki vouch replay. * Move certification listing code to the common module. * Move code in common to the sole function that uses it. * Move the sq pki link list implement to its own module. * Extend sq pki vouch list to list certifications of a certificate. * Improve test. * Simplify specifying certificate designators in tests. * Require that certificate designators are authenticated. * Use an explicit type for the trust amount parameter. * Fix sq --cli-version. * Improve sq pki link list's help text. * Improve error messages. * Avoid unnecessary lookups. * Relax sq pki link list's certificate designators. * Fix examples. * Don't export non-exportable sigs and components when exporting keys. * Add missing NEWS entry. * Fix duplicating packets when dumping. * Prevent monomorphization of Sq::resolve_cert. * Prevent monomorphization of Sq::resolve_certs_filter. * Add new command sq pki vouch list. * Move the code for listing certification to common. * Release 1.1.0. * Relax subplot dependency. * Relax rusqlite dependency. * Update Cargo.lock. * Fix output. * Add a lint for uncertified user IDs. * Show certificates without user IDs with --gossip. * Improve sq cert list's documentation. * Improve help text lints. * Fix long help generation for cert designators. * Update NEWS file. * Add option --unusable to sq cert list, etc. * Show hints about unusable bindings when --gossip is provided. * Change how we refer to unusable bindings in sq cert list. * Change sq cert list to not show warnings if --quiet is given. * Distinguish unauthenticated and invalid bindings in sq cert list. * Improve linting for sq cert list. * Don't list revoke user IDs. * Fix listing certificates by fingerprint or key ID. * Remove duplicate code. * Rework sq cert list's human readable output. * Improve UserIDDesignator::argument_value. * Fix UserIDDesignator::argument_value. * Add some helper functions. * tests: Add tests for sq cert list. * Fix sq cert list --gossip. * Fix output. * Release 1.0.0. * Fix NEWS. * Align `sq download` with `sq verify`. * Fix displaying preferred user IDs. * Write to temporary file first, then persist it under the final name. * Avoid using absolute paths in name of scratch files. * Automatically import certificates from GnuPG's certificate store. * Escape user IDs. * Escape preferred keyserver and policy URI. * Escape notation name and data. * Escape literal data file name and data prefix. * Escape all regular expressions. * Escape all reason for revocation messages. * Improve output sanitization. * Use the visual idiom for cert,userid pairs authenticating downloads. * Use the visual idiom for cert, userid pairs when decrypting. * Use the visual idiom for cert, userid pairs when importing revs. * Use the visual idiom for cert, userid pairs when certifying. * Improve argument and value formatting in hints. * Improve help output. * Revert "Refine sq pki {authenticate,lookup}'s user ID designators." * Fix commands embedded in the documentation. * Make verifying detached signatures more efficient. * Require sequoia-openpgp 1.22. * Fix hint. * Refine sq key userid revoke's user ID designators. * Refine sq pki vouch {add,authorize}'s user ID designators. * Refine sq pki {authenticate,lookup}'s user ID designators. * Refine sq pki link retract's user ID designators. * Refine sq pki link {add,authorize}'s user ID designators. * Add sq pki path --userid-by-email. * Gracefully handle unencrypted Autocrypt messages. * Align output emitted when importing certificates. * Don't unconditionally show provenance messages. * Fix importing unencrypted Autocrypt messages. * Improve error handling opening the cert store. * Do not hide errors from keyrings in verify. * Refactor packet and keyring files in /cli to new example framework. * Refactor files in /cli/network to new example framework. * Refactor files in /cli/pki to new example framework. * Refactor files in /cli to new example framework. * Remove the unstable CLI warning. * Don't make impossible recommendations. * Remove useless code. * Disable the --name and --add-name arguments. * Rename --userid-or-add to --add-userid, etc. * Extend and

Fix available

Published

2026-08-25T18:07:43Z

Updated

2026-08-27T18:23:12.278447922Z

Stack: system

Check your server →