Red Hat Security Advisory

RHSA-2023:5080

keylime security update

Released 2023-09-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) keylime-6.5.2-6.el9_2, keylime-base-6.5.2-6.el9_2, keylime-registrar-6.5.2-6.el9_2 +4

TI-2023-19613 CVE-2023-38200 · GHSA-pg75-v6fp-8q59

MEDIUM 42

A flaw was found in Keylime.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01448 Published 2023-07-24 Fixed in 6.5.2-6.el9_2, 7.4.0 CWE-400

TI-2023-19614 CVE-2023-38201 · GHSA-f4r5-q63f-gcww

LOW 29

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0049 Published 2023-08-25 Fixed in 6.5.2-6.el9_2, 7.5.0 CWE-639