RLSA-2026:97868: Important: rust-sequoia-sq security update
Command-line frontends for Sequoia.
Security Fix(es):
hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records (CVE-2026-93657)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/rust-sequoia-sq-debugsourceto a version that resolves this vulnerability.Fixed in 0:1.4.0.2-4.el9_9 - Upgrade
Upgrade
rocky-linux/sequoia-sqto a version that resolves this vulnerability.Fixed in 0:1.4.0.2-4.el9_9 - Upgrade
Upgrade
rocky-linux/sequoia-sq-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.4.0.2-4.el9_9
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems with the listed Rocky Linux Sequoia command-line frontend packages installed are the affected population: sequoia-sq, sequoia-sq-debuginfo, and rust-sequoia-sq-debugsource.
What does an attacker need to exploit the vulnerability?
The CVSS vector indicates network reachability, low attack complexity, no required privileges, and no user interaction. The issue is a DNSSEC validation bypass that can allow forged DNS records.
What is the security impact?
The supplied CVSS vector rates integrity impact as high, with no confidentiality or availability impact indicated. The severity is high with a score of 7.5.