Most recent entries from all

ALSA-2021:4413 — Moderate: tpm2-tools security and enhancement update

Affected: AlmaLinux:8: tpm2-tools

The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module (TPM) 2.0 devices from user space.

Security Fix(es):

* tpm2-tools: fixed AES wrapping key in tpm2_import (CVE-2021-3565)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-04868

EUVD-2026-20927

fkie_cve-2021-3565

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

GHSA-jxhq-r9c5-f85p

gsd-2021-3565

msrc_CVE-2021-3565 — A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inne…

msrc_CVE-2021-3565

OESA-2021-1384 — tpm2-tools security update

Affected: openEuler:20.03-LTS-SP1: tpm2-tools, openEuler:20.03-LTS-SP2: tpm2-tools

The package contains the code for the TPM (Trusted Platform Module) 2.0 tools based on tpm2-tss.

The tpm2-tools projects aims to deliver both low-level and aggregate command line tools that provide access to a tpm2.0 compatible device. Security Fix(es): A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3565)

openSUSE-SU-2021:0934-1 — Security update for tpm2.0-tools

Security update for tpm2.0-tools

SUSE-SU-2021:1998-1 — Security update for tpm2.0-tools

Security update for tpm2.0-tools

UBUNTU-CVE-2021-3565

Affected: Ubuntu:16.04:LTS: tpm2-tools, Ubuntu:20.04:LTS: tpm2-tools, Ubuntu:22.04:LTS: tpm2-tools, Ubuntu:24.04:LTS: tpm2-tools, Ubuntu:25.10: tpm2-tools, Ubuntu:26.04:LTS: tpm2-tools

WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.