Security update for keylime SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:4204-1 Final 1 1 2022-11-23T15:57:57Z current 2022-11-23T15:57:57Z 2022-11-23T15:57:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for keylime This update for keylime fixes the following issues: - CVE-2022-3500: Fixed vulnerability where a node seems as attested when in reality it is not properly attested (bsc#1204782). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-4204,SUSE-SLE-Module-Basesystem-15-SP4-2022-4204,openSUSE-SLE-15.4-2022-4204 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20224204-1/ Link for SUSE-SU-2022:4204-1 https://lists.suse.com/pipermail/sle-security-updates/2022-November/013098.html E-Mail link for SUSE-SU-2022:4204-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1204782 SUSE Bug 1204782 https://www.suse.com/security/cve/CVE-2022-3500/ SUSE CVE CVE-2022-3500 page SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.4 keylime-agent-6.3.2-150400.4.14.1 keylime-config-6.3.2-150400.4.14.1 keylime-firewalld-6.3.2-150400.4.14.1 keylime-logrotate-6.3.2-150400.4.14.1 keylime-registrar-6.3.2-150400.4.14.1 keylime-tpm_cert_store-6.3.2-150400.4.14.1 keylime-verifier-6.3.2-150400.4.14.1 python3-keylime-6.3.2-150400.4.14.1 keylime-agent-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-config-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-firewalld-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-logrotate-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-registrar-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-tpm_cert_store-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-verifier-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python3-keylime-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-agent-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 keylime-config-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 keylime-firewalld-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 keylime-registrar-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 keylime-tpm_cert_store-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 keylime-verifier-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 python3-keylime-6.3.2-150400.4.14.1 as a component of openSUSE Leap 15.4 A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore. CVE-2022-3500 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-agent-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-config-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-firewalld-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-logrotate-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-registrar-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-tpm_cert_store-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-verifier-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:python3-keylime-6.3.2-150400.4.14.1 openSUSE Leap 15.4:keylime-agent-6.3.2-150400.4.14.1 openSUSE Leap 15.4:keylime-config-6.3.2-150400.4.14.1 openSUSE Leap 15.4:keylime-firewalld-6.3.2-150400.4.14.1 openSUSE Leap 15.4:keylime-registrar-6.3.2-150400.4.14.1 openSUSE Leap 15.4:keylime-tpm_cert_store-6.3.2-150400.4.14.1 openSUSE Leap 15.4:keylime-verifier-6.3.2-150400.4.14.1 openSUSE Leap 15.4:python3-keylime-6.3.2-150400.4.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20224204-1/ https://www.suse.com/security/cve/CVE-2022-3500.html CVE-2022-3500 https://bugzilla.suse.com/1204782 SUSE Bug 1204782