OPENSUSE-SU-2025:20159-1 Security update for keylime

This update for keylime fixes the following issues: Update to version 7.13.0+40. Security issues fixed: - CVE-2025-13609: possible agent identity takeover due to registrar allowing the registration of agents with duplicate UUIDs bsc1254199. - CVE-2025-1057: registrar denial-of-service due to...

CVE-2025-1057

creationtimestamp| type| source ---|---|--- 2025-03-15 09:44:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7677 2025-03-15 11:06:25+00:00| seen| https://t.me/cvedetector/20365 2025-03-15 13:06:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkg6w26e4o24...

CVE-2025-1057

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...

CVE-2025-1057

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...