Описание
Security update for tpm2.0-tools
This update for tpm2.0-tools fixes the following issues:
- CVE-2021-3565: Fixed issue when no encrypted session with the TPM is used (bsc#1186490).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Список пакетов
openSUSE Leap 15.2
tpm2.0-tools-4.1-lp152.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2021:0934-1
- SUSE Security Ratings
- SUSE Bug 1186490
- SUSE CVE CVE-2021-3565 page
Описание
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.
Затронутые продукты
openSUSE Leap 15.2:tpm2.0-tools-4.1-lp152.2.3.1
Ссылки
- CVE-2021-3565
- SUSE Bug 1186490