Skip to content
OpenAdvisories
Low ELSA-2023-6685 1 CVE

Low: tpm2-tss security and enhancement update (Oracle Linux 9)

Published Nov 11, 2023 · Updated Nov 11, 2023

Ecosystem: Oracle Linux

Summary

[3.2.2-2]
- Remove misapplied license
Resolves: rhbz#2160307

[3.2.2-1]
- Rebase to 3.2.2
- Use systemd-sysusers to create user
Resolves: CVE-2023-22745
Resolves: rhbz#2095479
Resolves: rhbz#2160307
Resolves: rhbz#2162613

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 tpm2-tss 0:3.2.2-2.el9
Oracle Linux · 9 tpm2-tss-devel 0:3.2.2-2.el9

Vulnerabilities 1

  • Medium 6.4
    CVE-2023-22745

    Buffer Overlow in TSS2_RC_Decode in tpm2-tss

    tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `lay…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Azure Linux