tpm2-tss 3.0.1 changed or fixed:
• Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly
• Note that all TPM object created with a PolicyPCR with the currentPcrs
• and currentPcrsAndBank options have been created with an incorrect policy
• that ommits PCR checks. All these objects have to be recreated!
• Fix bug in FAPI NV creation with custom index values
• Cleanup of leftover sessions in error cases in FAPI
• Better error messages in several FAPI errors
• Add checks to FAPI policy paths
• Add checks if FAPI is correctly provisioned
• Fix execution of FAPI policies in some cases
• Allow 0x prefixes for TPMU_HA in JSON encoding
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2020-1d3fcce2a3
Please log in to add feedback.
This update has been submitted for testing by pbrobinson.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
pbrobinson edited this update.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
Works
This update can be pushed to stable now if the maintainer wishes
works
This update has been submitted for stable by pbrobinson.
This update has been pushed to stable.