{}

{}

{}

{"acknowledgement": "Red Hat would like to thank Yashashree Gund for reporting this issue.", "bugzilla": {"description": "rust-rpm-sequoia: rust-rpm-sequoia: Denial of Service via crafted RPM file during signature verification", "id": "2440357", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440357"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-347", "details": ["No description is available for this CVE."], "mitigation": {"lang": "en:us", "value": "Avoid processing untrusted or attacker-controlled RPM files with rpm -Kv or rpm --checksig. Use isolated environments or additional validation layers when handling untrusted RPM artifacts."}, "name": "CVE-2026-2625", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "rust-rpm-sequoia", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "rust-rpm-sequoia", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-02-17T12:34:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-2625\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-2625"], "threat_severity": "Moderate"}

{}