Skip to content
OpenAdvisories
Medium ELSA-2022-8444 1 CVE

Moderate: keylime security update (Oracle Linux 9)

Published Nov 24, 2022 · Updated Nov 24, 2022

Ecosystem: Oracle Linux

Summary

[6.5.1-1]
- Update to 6.5.1
Resolves: CVE-2022-3500

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 9 keylime 0:6.5.1-1.el9_1
Oracle Linux · 9 keylime-base 0:6.5.1-1.el9_1
Oracle Linux · 9 keylime-registrar 0:6.5.1-1.el9_1
Oracle Linux · 9 keylime-selinux 0:6.5.1-1.el9_1
Oracle Linux · 9 keylime-tenant 0:6.5.1-1.el9_1
Oracle Linux · 9 keylime-verifier 0:6.5.1-1.el9_1
Oracle Linux · 9 python3-keylime 0:6.5.1-1.el9_1

Vulnerabilities 1

  • Medium 5.1
    CVE-2022-3500

    Keylime: unhandled exceptions could lead to invalid attestation states

    A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that …

    keylime PyPI