Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia: 2020-0417 Moderate: tpm2-tss PolicyPCR Security Fix

mageia
Calendar Grey November 13, 2020
Dist Mageia Esm H88
The latest tpm2-tss updates rectify a significant vulnerability in Mageia's handling of the Trusted Platform Module. Prompt measures are necessary.
FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)

Summary

FAPI PolicyPCR not instatiating correctly (CVE-2020-24455).
Note that all TPM object created with a PolicyPCR with the currentPcrsand currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated.
The tpm2-tss package has been updated to version 2.4.3, which includes a fix for this issue and several other changes. See the upstream release announcements for details.

References

- https://bugs.mageia.org/show_bug.cgi?id=27412

- https://github.com/tpm2-software/tpm2-tss/releases/tag/2.4.3

- https://github.com/tpm2-software/tpm2-tss/releases

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KBRTMYDRPQBDGNADVXGI745WGT2MGVOO/

- https://www.cve.org/CVERecord?id=CVE-2020-24455

Topics%20covered

Topics Covered

security advisory security issue update policy fix Mageia tpm2-tss PCR check

Resolution

SRPMS

- 7/core/tpm2-tss-2.4.3-1.mga7

Publication date: 13 Nov 2020
URL: https://advisories.mageia.org/MGASA-2020-0417.html
Type: security
CVE: CVE-2020-24455

Topics%20covered

Topics Covered

security advisory security issue update policy fix Mageia tpm2-tss PCR check

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here