Rebuild with version 0.10.79 of the openssl crate which includes fixes for the following security issues: CVE-2026-41676 / GHSA-pqf5-4pqq-29f5 CVE-2026-41677 / GHSA-xmgf-hq76-4vx2 CVE-2026-41678 / GHSA-8c75-8mhr-p7r9. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9002354692 2026-05-19 16:18:59.081704+00:00 -------------------------------------------------------------------------------- Name : keylime-agent-rust Product : Fedora 44 Version : 0.2.9 Release : 2.fc44 URL : https://github.com/keylime/rust-keylime/ Summary : The Keylime agent Description : The Keylime agent -------------------------------------------------------------------------------- Update Information: Rebuild with version 0.10.79 of the openssl crate which includes fixes for the following security issues: CVE-2026-41676 / GHSA-pqf5-4pqq-29f5 CVE-2026-41677 / GHSA-xmgf-hq76-4vx2 CVE-2026-41678 / GHSA-8c75-8mhr-p7r9 CVE-2026-41681 / GHSA-ghm9-cr32-g9qj CVE-2026-41898 / GHSA-hppc-g8h3-xhp3 CVE-2026-42327 / GHSA-xp3w-r5p5-63rr CVE-2026-44662 / GHSA-xv59-967r-8726 -------------------------------------------------------------------------------- ChangeLog: * Mon May 11 2026 Fabio Valentini - 0.2.9-2 - Rebuild for rust-openssl CVE-2026-{41676,41677,41678,41681,41898,42327,44662} -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9002354692' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for keylime Announcement ID: SUSE-SU-2026:20912-1 Release Date: 2026-03-19T08:18:59Z Rating: critical References: * bsc#1257895 * jsc#PED-14735 Cross-References: * CVE-2026-1709 CVSS scores: * CVE-2026-1709 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-1709 ( SUSE ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-1709 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-1709 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server - BCI 16.0 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for keylime fixes the following issues: * Update to version 7.14.0+0 (CVE-2026-1709, bsc#1257895): * CVE-2026-1709: Fixed an authentication bypass which may allow unauthorized administrative operations due to missing client-side TLS authentication. (bsc#1257895) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server - BCI 16.0 zypper in -t patch SUSE-SLES-16.0-412=1 ## Package List: * SUSE Linux Enterprise Server - BCI 16.0 (noarch) * keylime-logrotate-7.14.0+0-160000.1.1 * keylime-registrar-7.14.0+0-160000.1.1 * keylime-firewalld-7.14.0+0-160000.1.1 * keylime-verifier-7.14.0+0-160000.1.1 * keylime-tpm_cert_store-7.14.0+0-160000.1.1 * keylime-tenant-7.14.0+0-160000.1.1 * python313-keylime-7.14.0+0-160000.1.1 * keylime-config-7.14.0+0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1709.html * https://bugzilla.suse.com/show_bug.cgi?id=1257895 * https://jira.suse.com/browse/PED-14735 . A critical SUSE updatefor Keylime addresses CVE-2026-1709 authentication bypass and includes installation details.. SUSE Keylime Authentication Keylime Update CVE-2026-1709. . Severity: Critical. LinuxSecurity.com Team
Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-2b8b223cf0 2026-03-07 00:17:58.500932+00:00 -------------------------------------------------------------------------------- Name : keylime Product : Fedora 44 Version : 7.14.1 Release : 1.fc44 URL : https://github.com/keylime/keylime Summary : Open source TPM software for Bootstrapping and Maintaining Trust Description : Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. -------------------------------------------------------------------------------- Update Information: Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609 -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 13 2026 Sergio Correia - 7.14.1-1 - Updating for Keylime release v7.14.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2416761 - CVE-2025-13609 keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration https://bugzilla.redhat.com/show_bug.cgi?id=2416761 [ 2 ] Bug #2435514 - CVE-2026-1709 keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication https://bugzilla.redhat.com/show_bug.cgi?id=2435514 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2b8b223cf0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c2b5451b35 2026-03-04 01:24:56.034104+00:00 -------------------------------------------------------------------------------- Name : keylime Product : Fedora 42 Version : 7.14.1 Release : 1.fc42 URL : https://github.com/keylime/keylime Summary : Open source TPM software for Bootstrapping and Maintaining Trust Description : Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. -------------------------------------------------------------------------------- Update Information: Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609 -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 13 2026 Sergio Correia - 7.14.1-1 - Updating for Keylime release v7.14.1 * Sat Feb 7 2026 Sergio Correia - 7.13.1-1 - Updating for Keylime release v7.13.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2435514 - CVE-2026-1709 keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication https://bugzilla.redhat.com/show_bug.cgi?id=2435514 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c2b5451b35' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-e5027335a3 2026-03-04 00:54:59.722797+00:00 -------------------------------------------------------------------------------- Name : keylime Product : Fedora 43 Version : 7.14.1 Release : 1.fc43 URL : https://github.com/keylime/keylime Summary : Open source TPM software for Bootstrapping and Maintaining Trust Description : Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. -------------------------------------------------------------------------------- Update Information: Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609 -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 13 2026 Sergio Correia - 7.14.1-1 - Updating for Keylime release v7.14.1 * Sat Feb 7 2026 Sergio Correia - 7.13.1-1 - Updating for Keylime release v7.13.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2435514 - CVE-2026-1709 keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication https://bugzilla.redhat.com/show_bug.cgi?id=2435514 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e5027335a3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Critical: keylime security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2224", "synopsis": "Critical: keylime security update", "severity": "SEVERITY_CRITICAL", "topic": "An update is available for keylime.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.\n\nSecurity Fix(es):\n\n* keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication (CVE-2026-1709)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2435514", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2435514", "description": ""}], "cves": [{"name": "CVE-2026-1709", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-1709", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "cvss3BaseScore": "9.4", "cwe": "CWE-322"}], "references": [], "publishedAt": "2026-02-13T09:06:49.393244Z", "rpms": {"Rocky Linux 9": {"nvras": ["keylime-base-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-base-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-0:7.12.1-11.el9_7.4.src.rpm", "keylime-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-base-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-base-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.s390x.rpm","keylime-registrar-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-selinux-0:7.12.1-11.el9_7.4.noarch.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.x86_64.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.aarch64.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.ppc64le.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.s390x.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Critical keylime security update for Rocky Linux addresses key vulnerabilities, ensuring system integrity and trusted operations.. Rocky Linux Security Keylime Update Critical Authentication. . Severity: Critical. LinuxSecurity.com Team
Critical: keylime security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2224", "synopsis": "Critical: keylime security update", "severity": "SEVERITY_CRITICAL", "topic": "An update is available for keylime.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.\n\nSecurity Fix(es):\n\n* keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication (CVE-2026-1709)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2435514", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2435514", "description": ""}], "cves": [{"name": "CVE-2026-1709", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-1709", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "cvss3BaseScore": "9.4", "cwe": "CWE-322"}], "references": [], "publishedAt": "2026-02-13T09:06:49.393244Z", "rpms": {"Rocky Linux 9": {"nvras": ["keylime-base-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-base-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-0:7.12.1-11.el9_7.4.src.rpm", "keylime-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-base-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-base-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.s390x.rpm","keylime-registrar-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-selinux-0:7.12.1-11.el9_7.4.noarch.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.x86_64.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.aarch64.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.ppc64le.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.s390x.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Critical keylime update for Rocky Linux 9 addresses authentication bypass issues. Update recommended for security risks.. Keylime Update, Rocky Linux, Critical Security Alert. . Severity: Critical. LinuxSecurity.com Team
Critical: keylime security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2224", "synopsis": "Critical: keylime security update", "severity": "SEVERITY_CRITICAL", "topic": "An update is available for keylime.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.\n\nSecurity Fix(es):\n\n* keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication (CVE-2026-1709)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2435514", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2435514", "description": ""}], "cves": [{"name": "CVE-2026-1709", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-1709", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "cvss3BaseScore": "9.4", "cwe": "CWE-322"}], "references": [], "publishedAt": "2026-02-13T09:06:49.393244Z", "rpms": {"Rocky Linux 9": {"nvras": ["keylime-base-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-base-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-0:7.12.1-11.el9_7.4.src.rpm", "keylime-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-base-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-base-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-registrar-0:7.12.1-11.el9_7.4.s390x.rpm","keylime-registrar-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-selinux-0:7.12.1-11.el9_7.4.noarch.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-tenant-0:7.12.1-11.el9_7.4.x86_64.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.aarch64.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.ppc64le.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.s390x.rpm", "keylime-verifier-0:7.12.1-11.el9_7.4.x86_64.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.aarch64.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.ppc64le.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.s390x.rpm", "python3-keylime-0:7.12.1-11.el9_7.4.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Keylime critical security update for Rocky Linux 9 addresses authentication bypass issue with CVE-2026-1709. Update recommended.. Keylime security, Rocky Linux advisory, authentication bypass, CVE-2026-1709, security update. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.