433 matches found
new packages: tpm2-abrmd
An update is available for tpm2-abrmd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
new packages: clevis-pin-tpm2
An update is available for clevis-pin-tpm2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
CVE-2020-24455 affecting package tpm2-tss for versions less than 2.4.6-1
CVE-2020-24455 affecting package tpm2-tss for versions less than 2.4.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-3565 affecting package tpm2-tools for versions less than 4.2-2
CVE-2021-3565 affecting package tpm2-tools for versions less than 4.2-2. A patched version of the package is available...
libtpms security update
libtpms 0.8.8-1.el7 - spec: Update spec file to version 0.8.8 Fri Sep 17 2021 Stefan Berger - 0.8.7-1 - tpm2: Fixes for building and running with OpenSSL 3.0 Fri Sep 10 2021 Stefan Berger - 0.8.6-1 - tpm2: Marshal event sequence objects' hash state Wed Sep 01 2021 Stefan Berger - 0.8.5-1 - tpm2:...
AlmaLinux 8 : tpm2-tools (ALSA-2021:4413)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4413 advisory. - A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM...
Mageia: Security Advisory (MGASA-2021-0353)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2020-0417)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202107-10 : TCG TPM2 Software Stack: Information disclosure
The remote host is affected by the vulnerability described in GLSA-202107-10 TCG TPM2 Software Stack: Information disclosure TCG TPM2 Software Stack did not appropriately apply FAPI policies to protect data encrypted with the trusted platform module. Impact : Data encrypted using TCG TPM2 Softwar...
Oracle Linux 8 : tpm2-tools (ELSA-2021-4413)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4413 advisory. - Fix CVE-2021-3565 resolves: rhbz1965981 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...
tpm2-tools security and enhancement update
4.1.1-5 - Bump nvr to trigger osci. resolves: rhbz1965981 4.1.1-4 - Fix CVE-2021-3565 resolves: rhbz1965981 4.1.1-3 - Fix resource leak. - Fix to restrict policy digest size. - Fix incompatible pointer cast. - Fix error message in filesloadname - Fix issue where execution couldnt reach function...
RHEL 8 : tpm2-tools (RHSA-2021:4413)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:4413 advisory. The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security...
CentOS 8 : tpm2-tools (CESA-2021:4413)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4413 advisory. - tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 Note that Nessus has not tested for this issue but has instead relied only on the application's...
tpm2-tools: fixed AES wrapping key in tpm2_import
A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality...
Moderate: Red Hat Security Advisory: tpm2-tools security and enhancement update
An update for tpm2-tools is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Moderate: tpm2-tools security and enhancement update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 For more details about the security issues, including the impact, a CVSS score,...
tpm2-tools security and enhancement update
An update is available for tpm2-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tpm2-tools packages add a set of utilities for management and...
ALSA-2021:4413 Moderate: tpm2-tools security and enhancement update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 For more details about the security issues, including the impact, a CVSS score,...
tpm2-tss bug fix and enhancement update
An update is available for tpm2-tss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...