(RHSA-2024:1139) Low: keylime security update

2024-03-0515:32:21

access.redhat.com

keylime tpm scalable

remote boot

integrity measurement

cve-2023-3674

unix

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

keylime: Attestation failure when the quote’s signature does not validate (CVE-2023-3674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xkeylime-verifier< 7.3.0-13.el9_3keylime-verifier-7.3.0-13.el9_3.s390x.rpm
RedHat9aarch64keylime-tenant< 7.3.0-13.el9_3keylime-tenant-7.3.0-13.el9_3.aarch64.rpm
RedHat9x86_64keylime-verifier< 7.3.0-13.el9_3keylime-verifier-7.3.0-13.el9_3.x86_64.rpm
RedHat9x86_64python3-keylime< 7.3.0-13.el9_3python3-keylime-7.3.0-13.el9_3.x86_64.rpm
RedHat9aarch64keylime-verifier< 7.3.0-13.el9_3keylime-verifier-7.3.0-13.el9_3.aarch64.rpm
RedHat9s390xkeylime< 7.3.0-13.el9_3keylime-7.3.0-13.el9_3.s390x.rpm
RedHat9ppc64lekeylime-registrar< 7.3.0-13.el9_3keylime-registrar-7.3.0-13.el9_3.ppc64le.rpm
RedHat9ppc64lekeylime-verifier< 7.3.0-13.el9_3keylime-verifier-7.3.0-13.el9_3.ppc64le.rpm
RedHat9aarch64keylime-base< 7.3.0-13.el9_3keylime-base-7.3.0-13.el9_3.aarch64.rpm
RedHat9s390xkeylime-tenant< 7.3.0-13.el9_3keylime-tenant-7.3.0-13.el9_3.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	keylime-verifier	< 7.3.0-13.el9_3	keylime-verifier-7.3.0-13.el9_3.s390x.rpm
RedHat	9	aarch64	keylime-tenant	< 7.3.0-13.el9_3	keylime-tenant-7.3.0-13.el9_3.aarch64.rpm
RedHat	9	x86_64	keylime-verifier	< 7.3.0-13.el9_3	keylime-verifier-7.3.0-13.el9_3.x86_64.rpm
RedHat	9	x86_64	python3-keylime	< 7.3.0-13.el9_3	python3-keylime-7.3.0-13.el9_3.x86_64.rpm
RedHat	9	aarch64	keylime-verifier	< 7.3.0-13.el9_3	keylime-verifier-7.3.0-13.el9_3.aarch64.rpm
RedHat	9	s390x	keylime	< 7.3.0-13.el9_3	keylime-7.3.0-13.el9_3.s390x.rpm
RedHat	9	ppc64le	keylime-registrar	< 7.3.0-13.el9_3	keylime-registrar-7.3.0-13.el9_3.ppc64le.rpm
RedHat	9	ppc64le	keylime-verifier	< 7.3.0-13.el9_3	keylime-verifier-7.3.0-13.el9_3.ppc64le.rpm
RedHat	9	aarch64	keylime-base	< 7.3.0-13.el9_3	keylime-base-7.3.0-13.el9_3.aarch64.rpm
RedHat	9	s390x	keylime-tenant	< 7.3.0-13.el9_3	keylime-tenant-7.3.0-13.el9_3.s390x.rpm