Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1998-1

Опубликовано: 11 июл. 2021
Источник: suse-cvrf

Описание

Security update for tpm2.0-tools

This update for tpm2.0-tools fixes the following issues:

  • CVE-2021-3565: Fixed issue when no encrypted session with the TPM is used (bsc#1186490).

Список пакетов

openSUSE Leap 15.3
tpm2.0-tools-4.3.0-4.3.1

Ссылки

Описание

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

Затронутые продукты
openSUSE Leap 15.3:tpm2.0-tools-4.3.0-4.3.1
Ссылки