Updated tpm2-tss packages fix a security vulnerability

FAPI PolicyPCR not instatiating correctly CVE-2020-24455. Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated. The tpm2-tss package has been...

MGASA-2020-0417 Updated tpm2-tss packages fix a security vulnerability

FAPI PolicyPCR not instatiating correctly CVE-2020-24455. Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated. The tpm2-tss package has been...

tpm2-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

tpm2-tss bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Fedora 33 : tpm2-tss (2020-1d3fcce2a3)

tpm2-tss 3.0.1 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...

Fedora 32 : tpm2-tss (2020-bb8e3c5548)

tpm2-tss 2.4.3 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...

Fedora: Security Advisory for tpm2-tss (FEDORA-2020-bb8e3c5548)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: tpm2-tss-2.4.3-1.fc32

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

[SECURITY] Fedora 33 Update: tpm2-tss-3.0.1-1.fc33

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

Fedora: Security Advisory for tpm2-tss (FEDORA-2020-1d3fcce2a3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

tpm2:tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros

Detailed Report: https://oss-fuzz.com/testcase?key=5767381644476416 Project: tpm2 Fuzzing Engine: libFuzzer Fuzz Target: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: MemoryRemoveTrailingZeros CheckPWAuthSessio...

edk2 security, bug fix, and enhancement update

20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch bz1714446 - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch bz1714446 - Resolves: bz1714446 edk2-aarch64 silen...

openSUSE Security Update : the Linux Kernel (openSUSE-2018-377)

The openSUSE Leap 42.3 kernel was updated to 4.4.126 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-1091: In the flushtmregstothread function in arch/powerpc/kernel/ptrace.c, a guest kernel crash can be triggered from unprivileged userspace during a...

tpm2/tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros

Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed report: https://oss-fuzz.com/testcase?key=6246632883486720 Project: tpm2 Fuzzer: libFuzzertpm2executecommandfuzzer Fuzz target binary: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type...

CVE-2017-7524

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...

CVE-2017-7524

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...

CVE-2017-7524

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...

Design/Logic Flaw

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...

CVE-2017-7524

CVE-2017-7524 affects tpm2-tools before 1.1.1, where a password is transmitted in plaintext from client to server when generating an HMAC, enabling a potential password leak. Publicly documented details across connected sources confirm the affected component and root cause, with several advisorie...

CVE-2017-7524

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...