ELSA-2024-9424

ELSA-2024-9424 - tpm2-tools security update

Type:	SECURITY
Impact:	LOW
Release Date:	2024-11-14

Description

[5.2-4]
- Backport upstream fixes.
- tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
- tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
- Fix check of magic number.
Resolves: RHEL-23198
Resolves: RHEL-41031
Resolves: RHEL-41035

Related CVEs

CVE-2024-29038

CVE-2024-29039

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tpm2-tools-5.2-4.el9.src.rpm	e6ea416fc6a54f2d09baca0deb77ba430cd4682191bd224ebeb245c7e7472343	-	ol9_aarch64_appstream
	tpm2-tools-5.2-4.el9.aarch64.rpm	894a4a16c2684c672440720aa2a3aa2cca2c67c3c5d2e4205149816d96f2351b	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tpm2-tools-5.2-4.el9.src.rpm	e6ea416fc6a54f2d09baca0deb77ba430cd4682191bd224ebeb245c7e7472343	-	ol9_x86_64_baseos_latest
	tpm2-tools-5.2-4.el9.src.rpm	e6ea416fc6a54f2d09baca0deb77ba430cd4682191bd224ebeb245c7e7472343	-	ol9_x86_64_u5_baseos_base
	tpm2-tools-5.2-4.el9.x86_64.rpm	442d03854b81518ef661872063db1fa64a1fd46672dbf5cc09efc4c5ff73e75a	-	ol9_x86_64_baseos_latest
	tpm2-tools-5.2-4.el9.x86_64.rpm	442d03854b81518ef661872063db1fa64a1fd46672dbf5cc09efc4c5ff73e75a	-	ol9_x86_64_u5_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team