RLSA-2026:98075: Important: rust-sequoia-sq security update
Command-line frontends for Sequoia.
Security Fix(es):
hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records (CVE-2026-93657)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/sequoia-sqto a version that resolves this vulnerability.Fixed in 0:1.4.0.2-3.el10_3 - Upgrade
Upgrade
rocky-linux/sequoia-sq-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.4.0.2-3.el10_3 - Upgrade
Upgrade
rocky-linux/rust-sequoia-sq-debugsourceto a version that resolves this vulnerability.Fixed in 0:1.4.0.2-3.el10_3
Event History
Frequently Asked Questions
Which Rocky Linux packages are covered by this advisory?
The advisory covers rocky-linux/sequoia-sq, rocky-linux/sequoia-sq-debuginfo, and rocky-linux/rust-sequoia-sq-debugsource.
What would an attacker need to exploit this issue?
The issue is described as a DNSSEC validation bypass that permits forged DNS records. The listed CVSS vector indicates network-based exploitation with low attack complexity, no privileges, and no user interaction.
What is the potential security impact?
The advisory assigns a high severity score of 7.5. Its CVSS vector indicates an integrity impact, with no listed confidentiality or availability impact.