Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0417
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0417)
Zusammenfassung:	The remote host is missing an update for the 'tpm2-tss' package(s) announced via the MGASA-2020-0417 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'tpm2-tss' package(s) announced via the MGASA-2020-0417 advisory. Vulnerability Insight: FAPI PolicyPCR not instatiating correctly (CVE-2020-24455). Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated. The tpm2-tss package has been updated to version 2.4.3, which includes a fix for this issue and several other changes. See the upstream release announcements for details. Affected Software/OS: 'tpm2-tss' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-24455 https://bugzilla.redhat.com/show_bug.cgi?id=1902167 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KPOENCMJU4DMT3BDNUBRK25B3DJ47UO/ https://security.gentoo.org/glsa/202107-10
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.