Fedora alert FEDORA-2026-f0293b845e (rauc)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: rauc-1.15.2-1.fc43 | |
| Date: | Wed, 08 Apr 2026 00:54:17 +0000 | |
| Message-ID: | <20260408005417.A21877DF2B@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-f0293b845e 2026-04-08 00:52:24.173281+00:00 -------------------------------------------------------------------------------- Name : rauc Product : Fedora 43 Version : 1.15.2 Release : 1.fc43 URL : https://rauc.io/ Summary : Safe and secure software updates for embedded Linux Description : RAUC is a lightweight update client that runs on your Embedded Linux device and reliably controls the procedure of updating your device with a new firmware revision. RAUC is also the tool on your host system that lets you create, inspect and modify update artifacts for your device. Service is not installed as that is only needed on device. -------------------------------------------------------------------------------- Update Information: version bumped from 1.15.1 to 1.15.2 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 30 2026 Bruno Thomsen <bruno.thomsen@gmail.com> - 1.15.2-1 - Update package from 1.15.1 to 1.15.2 - Fixes CVE-2026-34155 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452217 - rauc-1.15.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452217 [ 2 ] Bug #2453895 - CVE-2026-34155 rauc: improper signing of plain bundles exceeding 2 GiB [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2453895 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-f0293b845e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new