438 matches found
Fedora 33 : tpm2-tss (2020-1d3fcce2a3)
tpm2-tss 3.0.1 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...
Fedora 32 : tpm2-tss (2020-bb8e3c5548)
tpm2-tss 2.4.3 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...
Fedora: Security Advisory for tpm2-tss (FEDORA-2020-bb8e3c5548)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: tpm2-tss-2.4.3-1.fc32
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...
[SECURITY] Fedora 33 Update: tpm2-tss-3.0.1-1.fc33
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...
Fedora: Security Advisory for tpm2-tss (FEDORA-2020-1d3fcce2a3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
tpm2:tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros
Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed Report: https://oss-fuzz.com/testcase?key=5767381644476416 Project: tpm2 Fuzzing Engine: libFuzzer Fuzz Target: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type: Index-out-of-bounds...
edk2 security, bug fix, and enhancement update
20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch bz1714446 - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch bz1714446 - Resolves: bz1714446 edk2-aarch64 silen...
openSUSE Security Update : the Linux Kernel (openSUSE-2018-377)
The openSUSE Leap 42.3 kernel was updated to 4.4.126 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-1091: In the flushtmregstothread function in arch/powerpc/kernel/ptrace.c, a guest kernel crash can be triggered from unprivileged userspace during a...
tpm2/tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros
Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed report: https://oss-fuzz.com/testcase?key=6246632883486720 Project: tpm2 Fuzzer: libFuzzertpm2executecommandfuzzer Fuzz target binary: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
Design/Logic Flaw
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
CVE-2017-7524 affects tpm2-tools before 1.1.1, where a password is transmitted in plaintext from client to server when generating an HMAC, enabling a potential password leak. Publicly documented details across connected sources confirm the affected component and root cause, with several advisorie...
tpm2: g_forceFailureMode
Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6356831496568832 Fuzzer: libFuzzertpm2executecommandfuzzer Job Type: libfuzzerasantpm2 Platform Id: linux Crash Type: ASSERT Crash Address: Crash State:...