Fedora Rust Sequoia Certificate Store Vulnerabilities Addressed in Recent Updates

On June 5, 2026, multiple Fedora advisories were released addressing low-severity vulnerabilities in the Rust Sequoia certificate store. The updates include the sequoia-wot crate upgraded to version 0.15.2 and the sequoia-keystore crate to version 0.7.3. These updates were prompted by three low-severity security vulnerabilities identified in the sequoia-wot library. Affected systems include Fedora 43 and 44, with specific advisories for various Rust Sequoia packages. Users are encouraged to apply the updates using the dnf package manager. The vulnerabilities were confirmed and documented in Bug #2356514. The updates were primarily managed by Fabio Valentini, who has been actively maintaining these packages. No active exploitation has been reported, and the vulnerabilities are categorized as low severity.

Key Points: • Fedora released updates for low-severity vulnerabilities in Rust Sequoia packages. • The sequoia-wot crate was updated to version 0.15.2 to address security issues. • Users are advised to apply updates using the dnf package manager.