A flaw was found in rust-rpm-sequoia.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 3, 2026 · NIST NVD

   Detected

   A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leading to an unconditional termination of the rpm process. This issue results in an application level denial of service, mak

2. Jul 24, 2026 · NIST NVD

   Updated

   A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leading to an unconditional termination of the rpm process. This issue results in an application level denial of service, mak

Affected

• cpe redhat/enterprise linux10.0
• cpe redhat/enterprise linux9.0
• cpe redhat/hardened imagesversion unspecified
• cpe sequoia-pgp/rpm-sequoiaversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-2625

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-2625

  A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leadi

  nvd.nist.gov

References

• Third Party Advisory · access.redhat.com
• Mitigation · access.redhat.com
• Issue Tracking · bugzilla.redhat.com