Back Linuxsecurity

Fedora 43 Keylime Essential Update for CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 4, 2026

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Update Information : Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609

Keylime is a TPM based highly scalable remote boot attestation

and runtime integrity measurement solution.

Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609

* Fri Feb 13 2026 Sergio Correia - 7.14.1-1 - Updating for Keylime release v7.14.1 * Sat Feb 7 2026 Sergio Correia - 7.13.1-1 - Updating for Keylime release v7.13.1

[ 1 ] Bug #2435514 - CVE-2026-1709 keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e5027335a3' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Keylime Updates Address Critical Vulnerabilities in Archlinux and Fedora Keylime has released updates to address two critical vulnerabilities, CVE-2026-1709 and CVE-2025-13609, affecting its remote boot attestation and integrity measurement solutions. Users are advised to update to keylime version 7.14.1 and keylime-agent-rust version 0.2.9 to mitigate these issues. The vulnerabilities were published on February 6, 2026, and November 24, 2025, respectively. 5 sources 27

Extracted Entities

Companies (1)

Fedora

CVEs (2)

CVE-2025-13609 CVE-2026-1709