ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent は、ssh-agent 互換のエージェントで、Trusted Platform Module TPM によって鍵を作成し、SSH サーバーに対する認証に使用できるようにします。 TPM シールド鍵は、Trusted Platform Module TPM 内部で作成され、.tpm サフィックスが付いたファイルにシールドされた秘密鍵です。これらは生成されたハードウェアにバインドされており、他のマシンに転送することはできません。 これにより、既存の PKCS11 ライブラリを ssh-agent や SSH...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

Rocky Linux 8.6 [CIQ] Security Update: swtpm / swtpm-debuginfo / swtpm-debugsource / swtpm-devel / etc Multiple Vulnerabilities (ciqsa-2026_0834)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260834 advisory. This advisory aggregates security fixes for the swtpm SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2022_7472)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227472 advisory. QEMU: fdc: heap buffer overflow in DMA read data transfers CVE-2021-3507 libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of...

SUSE SLES15 Security Update : swtpm (SUSE-SU-2026:4366-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4366-1 advisory. This update for swtpm fixes the following issue: - CVE-2026-75900: out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs...

Security update for swtpm

This update for swtpm fixes the following issue: CVE-2026-75900: out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:4366-1 Security update for swtpm

This update for swtpm fixes the following issue: - CVE-2026-75900: out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653...

OESA-2026-4059 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost...

SUSE-SU-2026:23879-1 Security update for swtpm

This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653...

SUSE-SU-2026:23927-1 Security update for swtpm

This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653...

Important: Red Hat Security Advisory: virt:rhel security update

An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Low. A Common...

Important: Red Hat Security Advisory: libvirt security update

An update for libvirt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

SUSE SLES15: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (SUSE-SU-2026:4009-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4009-1 advisory. - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477:...

SUSE SLES15: libvirt / libvirt-client / libvirt-daemon / etc (SUSE-SU-2026:4004-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4004-1 advisory. - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477:...

RHEL 7 : libvirt (RHSA-2026:69114)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69114 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems...

Important: Red Hat Security Advisory: virt:rhel security update

An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Commo...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...