MGASA-2021-0590

Dashboard / Vulnerabilities / MGASA-2021-0590

MGASA-2021-0590

Summary: Updated libtpms/swtpm packages fix security vulnerability

Details: CryptSym: fix AES output IV (CVE-2021-3505). Fixed a context save and suspend/resume problem when public keys are loaded. Reset too large size indicators in TPM2B to avoid access beyond buffer (CVE-2021-3623) Restore original value in buffer if unmarshalled one was illegal Fixed out-of-bounds access via specially crafted TPM 2 command packets (CVE-2021-3746) Marshal event sequence objects' hash state

References: https://advisories.mageia.org/MGASA-2021-0590.html, https://bugs.mageia.org/show_bug.cgi?id=28882, https://lists.fedoraproject.org/archives/list/[email protected]/message/NUCZX4S53TUNTSGTCRDNOQZV2V2RI4RJ/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/46YMIRHQHNKPCVNRVW4W27MFQQU7ZHHV/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/Z7KZSYMTE7Z4BBEZUWO2DIMQDWMGEP46/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/DZI42OR3JUEGWRKEVCOHL2FPTJVYCYBT/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/7UCZ7AV2UKWYYCNZ2NLLXW7QYCX7K337/, https://lists.opensuse.org/archives/list/[email protected]/thread/75RD2O2OFCMWPCMY5QMSZRNV5PG5BTS6/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/YVJSXDXD44WDR4VA2XL33IZDJTBGRXP7/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/7E3B6T5RBDKAWETDTW3WPORY3NK5IR46/