Vulnerability · openSUSE-RU-2026:22132-1
Recommended update for sequoia-sq
Published Oct 19, 2026 · catalog updated Oct 20, 2026 · Recommended update for sequoia-sq
Open the advisory
Exploitation likelihood is not on this record for openSUSE-RU-2026:22132-1. A missing EPSS score is not a low risk. Compare Recommended update for sequoia-sq with the linked advisory before you change production.
Gaps on this record
- The stored product name is a package slug. The name on this page is taken from the title (Recommended update for sequoia-sq).
- No vendor fix or required action is stored. Compare the linked advisory before you change production.
- EPSS is missing. A missing score is not a low risk.
- Severity
- Unknown—
- Known exploitation
- Not in CISA/VulnCheck KEV
- EPSS
- Awaiting synchronization with FIRST
- Remediation
- Advisory link
- Affected products
- openSUSE:Leap 16.0 sequoia-sq
This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: * tool: Release v1.5.0. * tool: Fix link to README. * tool: Set a version for the sqz dependency. * Enable optimizations when building rust-crypto crates. * Update NEWS. * lib: Release v0.1.0. * Update Cargo.lock. * meta: Update link to documentation. * lib: Update README. * lib: Rename the high-level library to sqz. * lib: Fix documentation. * lib: Mention network_search in the lookup functions documentation. * lib: Mention lookup and lookup_by in the certify documentation. * lib: Mention lookup_by sign documentation. * lib: Document that calls don't need to specify secret key material. * lib: Fix docs.rs URL * meta: Add rustfmt.toml that disables formatting * lib: fix type infer error * lib: Pass Paths through as is. * lib: Preprocess the network when listing all bindings. * lib: Upgrade sequoia-wot. * lib: After running cert list, save the signature verification cache. * lib: Parallelize cert list. * lib: Pass the policy when getting the trust root or a shadow CA. * implement dumping of pqc artifacts * lib: Use an iterator instead of a slice. * lib: Avoid monomorphization in signer. * lib: Fix documentation. * tool: Fix documentation. * lib: Drop unnecessary imports in example. * lib: Add required clap features. * lib: Gate network support behind a feature. * Don't conflate inline and cleartext signatures. * lib: Document the signer module. * lib: Add unit tests to the signer module. * lib: Fix get_primary_keys's return type. * lib: Convert get_signing_key, etc. to use the builder pattern. * lib: Move decrypt_key to its own module. * lib: Rename keys module to signer. * lib: Refactor get_keys and associated functions. * lib: Improve prompt's documentation. * lib: Add a default prompt to Sequoia, don't require a prompt. * lib: Loosen Sized constraint. * lib: Make Prompt and PromptFactory Send and Sync. * lib: Change SequoiaBuil
Are you affected?
Enter the version you run. The result uses only the ranges stored on this record.
The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.
- openSUSE:Leap 16.0 sequoia-sq0 → 1.5.0-bp160.1.1
How to fix openSUSE-RU-2026:22132-1
Recommended remediation
A patch or advisory reference is linked. Open the original publisher for availability by product version.
Official advisories
What to do
Three questions, each answered from this record only. Confirm the vendor advisory before you patch.
Should you patch?
Exploitation likelihood is not on this record for openSUSE-RU-2026:22132-1. A missing EPSS score is not a low risk. Compare Recommended update for sequoia-sq with the linked advisory before you change production.
Which versions are affected?
Compare what you have installed with 0 → 1.5.0-bp160.1.1. Compare the installed version with the linked vendor advisory before you change production.
What should an analyst verify?
No weakness class is stored. EPSS is not on this record yet. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 19, 2026 · OpenSSF OSV / OSV Scanner
Detected
This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: * tool: Release v1.5.0. * tool: Fix link to README. * tool: Set a version for the sqz dependency. * Enable optimizations when building rust-crypto crates. * Update NEWS. * lib: Release v0.1.0. * Update Cargo.lock. * meta: Update link to documentation. * lib: Up
Oct 20, 2026 · OpenSSF OSV / OSV Scanner
Fix available
sequoia-sq fixed in 1.5.0-bp160.1.1
Oct 20, 2026 · OpenSSF OSV / OSV Scanner
Fix available
sequoia-sq fixed in 1.5.0-bp160.1.1
Oct 20, 2026 · OpenSSF OSV / OSV Scanner
Updated
This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: * tool: Release v1.5.0. * tool: Fix link to README. * tool: Set a version for the sqz dependency. * Enable optimizations when building rust-crypto crates. * Update NEWS. * lib: Release v0.1.0. * Update Cargo.lock. * meta: Update link to documentation. * lib: Up
Sources
- OpenSSF OSV / OSV ScannerPackage advisoryopenSUSE-RU-2026:22132-1
Recommended update for sequoia-sq
osv.dev
References
Freshness
Last verified in this catalog Oct 20, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.