Summary
Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.
Security Fix(es):
* keylime: exception handling and impedance match in tornado_requests (CVE-2022-3500)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | keylime | 6.5.1-1.el9_1 |
| AlmaLinux · 9 | keylime-base | 6.5.1-1.el9_1 |
| AlmaLinux · 9 | keylime-registrar | 6.5.1-1.el9_1 |
| AlmaLinux · 9 | keylime-selinux | 6.5.1-1.el9_1 |
| AlmaLinux · 9 | keylime-tenant | 6.5.1-1.el9_1 |
| AlmaLinux · 9 | keylime-verifier | 6.5.1-1.el9_1 |
| AlmaLinux · 9 | python3-keylime | 6.5.1-1.el9_1 |
Vulnerabilities 1
-
Medium 5.1
Keylime: unhandled exceptions could lead to invalid attestation states
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that …