keylime security update

2024-05-1014:32:42

Rockylinux Product Errata

errata.rockylinux.org

keylime

security update

rocky linux 9

attestation failure

remote boot attestation

cve-2023-3674

cvss base score

tpm-based

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

JSON

An update is available for keylime.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

keylime: Attestation failure when the quote’s signature does not validate (CVE-2023-3674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky9aarch64keylime< 7.3.0-13.el9_3keylime-0:7.3.0-13.el9_3.aarch64.rpm
rocky9ppc64lekeylime< 7.3.0-13.el9_3keylime-0:7.3.0-13.el9_3.ppc64le.rpm
rocky9s390xkeylime< 7.3.0-13.el9_3keylime-0:7.3.0-13.el9_3.s390x.rpm
rocky9x86_64keylime< 7.3.0-13.el9_3keylime-0:7.3.0-13.el9_3.x86_64.rpm
rocky9aarch64keylime-base< 7.3.0-13.el9_3keylime-base-0:7.3.0-13.el9_3.aarch64.rpm
rocky9ppc64lekeylime-base< 7.3.0-13.el9_3keylime-base-0:7.3.0-13.el9_3.ppc64le.rpm
rocky9s390xkeylime-base< 7.3.0-13.el9_3keylime-base-0:7.3.0-13.el9_3.s390x.rpm
rocky9x86_64keylime-base< 7.3.0-13.el9_3keylime-base-0:7.3.0-13.el9_3.x86_64.rpm
rocky9aarch64keylime-registrar< 7.3.0-13.el9_3keylime-registrar-0:7.3.0-13.el9_3.aarch64.rpm
rocky9ppc64lekeylime-registrar< 7.3.0-13.el9_3keylime-registrar-0:7.3.0-13.el9_3.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	9	aarch64	keylime	< 7.3.0-13.el9_3	keylime-0:7.3.0-13.el9_3.aarch64.rpm
rocky	9	ppc64le	keylime	< 7.3.0-13.el9_3	keylime-0:7.3.0-13.el9_3.ppc64le.rpm
rocky	9	s390x	keylime	< 7.3.0-13.el9_3	keylime-0:7.3.0-13.el9_3.s390x.rpm
rocky	9	x86_64	keylime	< 7.3.0-13.el9_3	keylime-0:7.3.0-13.el9_3.x86_64.rpm
rocky	9	aarch64	keylime-base	< 7.3.0-13.el9_3	keylime-base-0:7.3.0-13.el9_3.aarch64.rpm
rocky	9	ppc64le	keylime-base	< 7.3.0-13.el9_3	keylime-base-0:7.3.0-13.el9_3.ppc64le.rpm
rocky	9	s390x	keylime-base	< 7.3.0-13.el9_3	keylime-base-0:7.3.0-13.el9_3.s390x.rpm
rocky	9	x86_64	keylime-base	< 7.3.0-13.el9_3	keylime-base-0:7.3.0-13.el9_3.x86_64.rpm
rocky	9	aarch64	keylime-registrar	< 7.3.0-13.el9_3	keylime-registrar-0:7.3.0-13.el9_3.aarch64.rpm
rocky	9	ppc64le	keylime-registrar	< 7.3.0-13.el9_3	keylime-registrar-0:7.3.0-13.el9_3.ppc64le.rpm