Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 33: FEDORA-2021-cfdc434610 Critical: RSA Key Security Update

Security fix for CVE-2021-3505. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-cfdc434610 2021-05-05 00:52:51.707339 --------------------------------------------------------------------------------Name : libtpms Product : Fedora 33 Version : 0.8.2 Release : 0.20210426git729fc6a4ca.fc33 URL : https://github.com/stefanberger/libtpms Summary : Library providing Trusted Platform Module (TPM) functionality Description : A library providing TPM functionality for VMs. Targeted for integration into Qemu. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-3505 --------------------------------------------------------------------------------ChangeLog: * Mon Apr 26 2021 Stefan Berger - 0.8.2-0.20210426git729fc6a4ca - tpm2: CryptSym: fix AES output IV; a CVE has been filed for this issue --------------------------------------------------------------------------------References: [ 1 ] Bug #1950046 - CVE-2021-3505 libtpms: RSA keys weaker than expected https://bugzilla.redhat.com/show_bug.cgi?id=1950046 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-cfdc434610' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . An update for libtpms in Fedora resolves CVE-2021-3506, enhancing ECC key integrity for TPM operations.. TPM Library Fix,Fedora Updates,LibTpm Security Update. . Severity: Critical. LinuxSecurity.com Team

May 04, 2021 •Critical Fedora