MGASA-2020-0417 - Updated tpm2-tss packages fix a security vulnerability

Publication date: 13 Nov 2020
Type: security
Affected Mageia releases: 7
CVE: CVE-2020-24455

FAPI PolicyPCR not instatiating correctly (CVE-2020-24455).

Note that all TPM object created with a PolicyPCR with the currentPcrs
and currentPcrsAndBank options have been created with an incorrect policy
that omits PCR checks. All such objects have to be recreated.

The tpm2-tss package has been updated to version 2.4.3, which includes a fix
for this issue and several other changes.  See the upstream release
announcements for details.

-[email protected]/thread/KBRTMYDRPQBDGNADVXGI745WGT2MGVOO/

- 7/core/tpm2-tss-2.4.3-1.mga7