Test ID:	1.3.6.1.4.1.25623.1.0.827667
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory for keyring-ima-signer (FEDORA-2023-cc21019773)
Summary:	The remote host is missing an update for the 'keyring-ima-signer'; package(s) announced via the FEDORA-2023-cc21019773 advisory.
Description:	Summary: The remote host is missing an update for the 'keyring-ima-signer' package(s) announced via the FEDORA-2023-cc21019773 advisory. Vulnerability Insight: The IMA (Integrity Measurement Architecture) is a key component of the Linux integrity subsystem designed to ensure integrity, authenticity, and confidentiality of systems including hardware root of trusts (TPM). This tool allows signing of files in userspace, inclusding options of including the signature in xattr or a .sig file, using signing keys stored in the kernel keyring to ensure they', re not recoverable. Affected Software/OS: 'keyring-ima-signer' package(s) on Fedora 38. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-26964 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZHBAE7LQARMPUEEV4TWET4D7G6WCWBUD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZYRZ5Y2ALATKKPIITAFAJIS4TR4LUAHO/ https://github.com/hyperium/hyper/issues/2877
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.