https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:01:08.862710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:1139 ALSA-2024:1139 — Low: keylime security update 2026-10-03T07:01:08.962938+00:00

Affected: AlmaLinux:9: keylime, AlmaLinux:9: keylime-base, AlmaLinux:9: keylime-registrar, AlmaLinux:9: keylime-selinux, AlmaLinux:9: keylime-tenant, AlmaLinux:9: keylime-verifier, AlmaLinux:9: python3-keylime

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

* keylime: Attestation failure when the quote's signature does not validate (CVE-2023-3674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-261608 EUVD-2026-261608 2026-10-03T07:01:08.963005+00:00 EUVD-2026-261608 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3674 fkie_cve-2023-3674 2026-10-03T07:01:08.963022+00:00

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.

 https://cve.radiocsirt.org/vuln/ghsa-g4wg-cfpf-9689 GHSA-g4wg-cfpf-9689 — keylime fails to flag device as untrusted when signature does not validate 2026-10-03T07:01:08.963046+00:00

Affected: PyPI: keylime

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.

 https://cve.radiocsirt.org/vuln/gsd-2023-3674 gsd-2023-3674 2026-10-03T07:01:08.963068+00:00 gsd-2023-3674 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14051-1 openSUSE-SU-2024:14051-1 — keylime-config-7.11.0-1.1 on GA media 2026-10-03T07:01:08.963080+00:00

keylime-config-7.11.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-128 PYSEC-2023-128 2026-10-03T07:01:08.963098+00:00

Affected: PyPI: keylime

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0558 WID-SEC-W-2024-0558 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T07:01:08.963116+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren oder um vertrauliche Informationen offenzulegen.