Skip to content
OpenAdvisories
Low RHSA-2024:1139 1 CVE

Red Hat Security Advisory: keylime security update

Published Sep 16, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime 0:7.3.0-13.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-base 0:7.3.0-13.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-registrar 0:7.3.0-13.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-selinux 0:7.3.0-13.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-tenant 0:7.3.0-13.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-verifier 0:7.3.0-13.el9_3
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-keylime 0:7.3.0-13.el9_3

Vulnerabilities 1

  • Low 2.3
    CVE-2023-3674

    Keylime: attestation failure when the quote's signature does not validate

    A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untr…

    Red Hat Red Hat Enterprise Linux 9 keylime Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2222903
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1139.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-3674
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3674
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3674
  • article
    https://github.com/keylime/keylime/commit/95ce3d86bd2c53009108ffda2dcf553312d733db