SUSE-SU-2026:20357-1 Security update for elemental-toolkit, elemental-operator

This update for elemental-toolkit, elemental-operator fixes the following issues: elemental-operator: - Update to v1.7.4: Bump github.com/rancher-sandbox/go-tpm and its dependencies This bump includes few CVE fixes: bsc1241826 CVE-2025-22872 bsc1241857 CVE-2025-22872 bsc1251511 CVE-2025-47911...

TPM 1.2 key authorization values vulnerable to TPM transport eavesdropper in go-tpm

Impact TPM 2.0 users are unaffected by this issue. An adversary eavesdropping on the TPM 1.2 transport path can calculate usageAuth for a key created with CreateWrapKey, even though this value is encrypted as part of the TPM 1.2 command protocol. The TPM 1.2 CreateWrapKey command accepts two...

Information Disclosure

github.com/google/go-tpm is vulnerable to information disclosure. An attacker is able to discover the encUsageAuth and encMigrationAuth values and calculateusageAuth ^ encMigrationAuth since the migrationAuth can be guessed for all keys created with CreateWrapKey, and subsequently discover the au...

CVE-2020-8918

An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWrapKey. An attacker listening in on the channel can collect both 'encUsageAuth' and...

CVE-2020-8918

The CVE-2020-8918 issue affects Google's go-tpm TPM1.2 library prior to 0.3.0, where a bug initializes migrationAuth, allowing a local attacker eavesdropping on TPM1.2 transport to compute usageAuth for keys created with CreateWrapKey by XOR’ing encUsageAuth and encMigrationAuth. TPM2.0 is not af...

CVE-2020-8918 TPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropper

An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWrapKey. An attacker listening in on the channel can collect both 'encUsageAuth' and...