Skip to content
OpenAdvisories
Medium ELSA-2026-28582 1 CVE

Moderate: keylime security update (Oracle Linux 10)

Published Jul 16, 2026 · Updated Jul 16, 2026

Ecosystem: Oracle Linux

Summary

[7.14.1-6]
- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
[RHEL-168795]

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 10 keylime 0:7.14.1-5.el10_2.1
Oracle Linux · 10 keylime-base 0:7.14.1-5.el10_2.1
Oracle Linux · 10 keylime-registrar 0:7.14.1-5.el10_2.1
Oracle Linux · 10 keylime-selinux 0:7.14.1-5.el10_2.1
Oracle Linux · 10 keylime-tenant 0:7.14.1-5.el10_2.1
Oracle Linux · 10 keylime-tools 0:7.14.1-5.el10_2.1
Oracle Linux · 10 keylime-verifier 0:7.14.1-5.el10_2.1
Oracle Linux · 10 python3-keylime 0:7.14.1-5.el10_2.1

Vulnerabilities 1

  • Medium 6.3
    CVE-2026-6420

    Keylime: keylime: security bypass due to hardcoded tpm quote nonce

    A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hardcoded challenge nonce for Trusted Platform Module (TPM) quot…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 keylime Linux PyPI