keylime-agent-rust-0.1.0-1.el9, keylime-6.5.1-1.el9

エラータID: AXSA:2023-5102:01

リリース日: 
2023/02/15 Wednesday - 11:08
題名: 
keylime-agent-rust-0.1.0-1.el9, keylime-6.5.1-1.el9
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- keylime には、発生した例外を適切に処理しない問題があるため、
ローカルの攻撃者により、不正なエージェントを介して、認証の
迂回を可能とする脆弱性が存在します。(CVE-2022-3500)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-3500
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. keylime-agent-rust-0.1.0-1.el9.src.rpm
    MD5: 5cc69c6f261db1aca52f3bbaebf37c23
    SHA-256: e6caf6752ac25151353675e1f33b6109481669326f40bb8cefb62547f0965900
    Size: 10.02 MB
  2. keylime-6.5.1-1.el9.src.rpm
    MD5: 83a5630d4f12a080079d30bdcd60d142
    SHA-256: 168be83660a6c98d5bb50648be8a4a0127a425593ad76b7e8d14280528ef5e92
    Size: 9.30 MB

Asianux Server 9 for x86_64
  1. keylime-6.5.1-1.el9.x86_64.rpm
    MD5: e3e465220621db156de59b1b03206b28
    SHA-256: faaa1fe8715d72edec063a263fa0d93a13c4eaffb2796a322ea27a813b262a5b
    Size: 12.05 kB
  2. keylime-agent-rust-0.1.0-1.el9.x86_64.rpm
    MD5: 358a5e48e2ae17b9615cd3b855a9a707
    SHA-256: d0ca57da9c6bdd5864a20580dbe91a62297ee44b8b8d9889ea0ac85fbb9bb499
    Size: 3.85 MB
  3. keylime-base-6.5.1-1.el9.x86_64.rpm
    MD5: 0dc1fede0217edaf6e09148abb7ec74a
    SHA-256: 701afb50c62e18faa46038091308ad8f9c0cb0c5cf34659014f4b191e602f9db
    Size: 57.05 kB
  4. keylime-registrar-6.5.1-1.el9.x86_64.rpm
    MD5: 47526f2906a9ac691a7e58fee26842e2
    SHA-256: f4fb1ecf2a644e18951652bd1fe1f84bbeab09a0801ea431f53fd94704db5d29
    Size: 15.23 kB
  5. keylime-selinux-6.5.1-1.el9.noarch.rpm
    MD5: eb5463ec930dabface477445c5ba8332
    SHA-256: 28bc1c1f1873ca9593f93840b8635b121212daa0a37823233ff7461270a96f36
    Size: 22.06 kB
  6. keylime-tenant-6.5.1-1.el9.x86_64.rpm
    MD5: bcc4476cfc21f3c416472ce2769b1e16
    SHA-256: 9ca30936dff04ec991911306ad6eaeacafe0295fdb16f97b1b1b09e95a8d7d9a
    Size: 14.68 kB
  7. keylime-verifier-6.5.1-1.el9.x86_64.rpm
    MD5: e2590353d66d41e6a72b9234811abd76
    SHA-256: 3ee020e87104fcff3ccc35280ea9a3f6f1f43e84cdac9673beeb9c13d763db16
    Size: 17.04 kB
  8. python3-keylime-6.5.1-1.el9.x86_64.rpm
    MD5: f57956dd7e86d5652f6512dc6f8c256b
    SHA-256: 6270da22313e6746b2c1edf2d548307467e5ed8bec68a85e19cac44e50082da8
    Size: 330.40 kB