https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:12:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278300 EUVD-2026-278300 https://cve.radiocsirt.org/vuln/euvd-2026-278300 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34155 <p>RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the &#39;plain&#39; format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2.</p> <p>RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the &#39;plain&#39; format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34155 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34155 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rauc, Ubuntu:22.04:LTS: rauc, Ubuntu:24.04:LTS: rauc, Ubuntu:25.10: rauc, Ubuntu:26.04:LTS: rauc</p> <p>RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the &#39;plain&#39; format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rauc, Ubuntu:22.04:LTS: rauc, Ubuntu:24.04:LTS: rauc, Ubuntu:25.10: rauc, Ubuntu:26.04:LTS: rauc</p> <p>RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the &#39;plain&#39; format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34155