Security update for tpm2.0-tools, tpm2-0-tss

This update for tpm2.0-tools, tpm2-0-tss fixes the following issues: tpm2-0-tss: Update to version 4.1: + Security - CVE-2024-29040: arbitrary quote data may go undetected by FapiVerifyQuote bsc1223690 Fixed fapi: Fix length check on FAPI auth callbacks mu: Correct error message for errors...

tpm2-tss bug fix and enhancement update

An update is available for tpm2-tss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

Linux Distros Unpatched Vulnerability : CVE-2023-22745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to...

SUSE CVE-2022-47930

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2680)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2646)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: tpm2-tss (CVE-2024-29040)

The version of tpm2-tss installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29040 advisory. - This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS...

CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4

CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4. A patched version of the package is available...

Keygen Protocol Exploitation

The Binance tss-lib is vulnerable to keygen protocol exploitation. The vulnerability is due to inadequate validation of the h1 and h2 parameters within the keygen protocol implementation, allows attackers to craft malicious parameters that can exploit the signing round process...

RHSA-2024:4739 Red Hat Security Advisory: tpm2-tss security update

Bulletin has no description...

RHSA-2024:4408 Red Hat Security Advisory: tpm2-tss security update

Bulletin has no description...

RHSA-2023:7166 Red Hat Security Advisory: tpm2-tss security and enhancement update

Bulletin has no description...

RHSA-2023:6685 Red Hat Security Advisory: tpm2-tss security and enhancement update

Bulletin has no description...

Security Bulletin: Vulnerability in tpm2-tss library (CVE-2023-22745) affects Power HMC.

Summary The tpm2-tss library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-22745 DESCRIPTION: tpm2-tss is vulnerable to a buffer overflow, caused by improper bounds checking by the Tss2RCSetHandler and Tss2RCDecode...

EulerOS Virtualization 2.12.1 : tpm2-tss (EulerOS-SA-2024-2319)

According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2339)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2319)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.12.0 : tpm2-tss (EulerOS-SA-2024-2339)

According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...

GO-2022-0769 Incorrect Default Permissions in Binance tss-lib in github.com/binance-chain/tss-lib

Incorrect Default Permissions in Binance tss-lib in github.com/binance-chain/tss-lib...

EulerOS Virtualization 2.11.1 : tpm2-tss (EulerOS-SA-2024-2163)

According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...