Package: rauc (1.13-3+deb13u1) Robust Auto-Update Controller - binary Other Packages Related to rauc: [libc6 ] (>= 2.34)
GNU C Library: Shared libraries
[libcurl3t64-gnutls ] (>= 7.28.0)
easy-to-use client-side URL transfer library (GnuTLS flavour)
[libfdisk1 ] (>= 2.31.1)
fdisk partitioning library
[libglib2.0-0t64 ] (>= 2.83.0)
GLib library of C routines
[libjson-glib-1.0-0 ] (>= 1.5.2)
GLib JSON manipulation library
[libnl-3-200 ] (>= 3.2.7)
library for dealing with netlink sockets
[libnl-genl-3-200 ] (>= 3.2.7)
library for dealing with netlink sockets - generic netlink
[libssl3t64 ] (>= 3.0.0)
Secure Sockets Layer toolkit - shared libraries
[dbus ]
simple interprocess messaging system (system message bus)
[systemd ]
system and service manager
[casync ]
content addressable data synchronizer
[cryptsetup-bin ]
disk encryption support - command line tools
[dosfstools ]
utilities for making and checking MS-DOS FAT filesystems
[e2fsprogs ]
ext2/ext3/ext4 file system utilities
[efibootmgr ]
Interact with the EFI Boot Manager
[fakeroot ]
tool for simulating superuser privileges
[grub-common ]
GRand Unified Bootloader (common files)
[libubootenv-tool ]
Library to access U-Boot environment - tool
[u-boot-tools ] (<< 2019.10~rc4+dfsg-1~)
companion tools for Das U-Boot bootloader
[mtd-utils ]
Memory Technology Device Utilities
[squashfs-tools ]
Tool to create and append to squashfs filesystems
[u-boot-tools ]
companion tools for Das U-Boot bootloader
Package file paths (7) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/rauc /usr/lib/systemd/catalog/rauc.catalog /usr/share/doc/rauc/changelog.Debian.gz /usr/share/doc/rauc/changelog.gz /usr/share/doc/rauc/copyright /usr/share/doc/rauc/README.Debian /usr/share/man/man1/rauc.1.gz Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-34155 ] Published: Mar 31, 2026, 1:28:14 PM UTC
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in
Critical(9.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 10:36:26 PM UTC
Details (2) 1.13-3+deb13u1 · amd64 · trixie
Fixed · Fixed: 1.13-3+deb13u1
nvd · rauc · debian · 13
1.13-3+deb13u1 · arm64 · trixie
Fixed · Fixed: 1.13-3+deb13u1
nvd · rauc · debian · 13
[CVE-2020-25860 ] Published: Dec 21, 2020, 6:15:00 PM UTC
rauc: CVE-2020-25860
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:49:56 PM UTC
Details (2)
Last synced: Oct 29, 2026, 6:33:15 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
1.13-3+deb13u1 / amd64 Observed Sep 1, 2026 sha256 890bea7a237d…acb70874Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 890bea7a237da448d576119d6941f7d9cbea0ae3442cd7326e2dfa86acb70874
Verify download
printf '%s %s\n' '890bea7a237da448d576119d6941f7d9cbea0ae3442cd7326e2dfa86acb70874' 'rauc_1.13-3+deb13u1_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
1.13-3+deb13u1 / arm64 Observed Sep 1, 2026 sha256 fd0f8cf1dfe6…8722cbb4Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): fd0f8cf1dfe6af199d1580cfe66607e35db0f98383f319a0b2eb91bf8722cbb4
Verify download
printf '%s %s\n' 'fd0f8cf1dfe6af199d1580cfe66607e35db0f98383f319a0b2eb91bf8722cbb4' 'rauc_1.13-3+deb13u1_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64
