Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Fedora 37: FEDORA-2023-37ae269843 Moderate Clevis Pin TPM2 Security Update

fedora
Calendar Grey May 18, 2023
Dist Fedora Esm H88
Locking mechanism for the clevis has been updated with security enhancements targeting identified vulnerabilities ensuring integrity.
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005](https://rustsec.org/...

Summary

Clevis PIN for unlocking with TPM2 supporting Authorized Policies.

Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some

(potential or confirmed) security or soundness issues: - `tokio`:

[RUSTSEC-2023-0005](https://rustsec.org/advisories/RUSTSEC-2023-0005.html) -`h2`: [RUSTSEC-2023-0034](https://rustsec.org/advisories/RUSTSEC-2023-0034.html)

/ [CVE-2023-26964](https://nvd.nist.gov/vuln/detail/CVE-2023-26964) - `openssl`:

[RUSTSEC-2023-0022](https://rustsec.org/advisories/RUSTSEC-2023-0022.html),

[RUSTSEC-2023-0023](https://rustsec.org/advisories/RUSTSEC-2023-0023.html),

[RUSTSEC-2023-0024](https://rustsec.org/advisories/RUSTSEC-2023-0024.html) This

update contains rebuilds of all affected applications against the latest

versions of these crates, which have addressed all linked issues.

* Wed May 3 2023 Fabio Valentini - 0.5.2-5

- Rebuild for openssl crate >= v0.10.48 (RUSTSEC-2023-{0022,0023,0024})

* Tue Feb 7 2023 Peter Robinson - 0.5.2-4

- Rebuild for tss-esapi 7.2.0

* Thu Jan 19 2023 Fedora Release Engineering - 0.5.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

su -c 'dnf upgrade --advisory FEDORA-2023-37ae269843' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 37
Version: 0.5.2
Release: 5.fc37
Summary: Clevis PIN for unlocking with TPM2 supporting Authorized Policies

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here