suse-su-2025:20151-1
Vulnerability from csaf_suse
Published
2025-03-18 10:58
Modified
2025-03-18 10:58
Summary
Security update for tpm2.0-tools, tpm2-0-tss
Notes
Title of the patch
Security update for tpm2.0-tools, tpm2-0-tss
Description of the patch
This update for tpm2.0-tools, tpm2-0-tss fixes the following issues:
tpm2-0-tss:
Update to version 4.1:
+ Security
- CVE-2024-29040: arbitrary quote data may go undetected by Fapi_VerifyQuote (bsc#1223690)
+ Fixed
- fapi: Fix length check on FAPI auth callbacks
- mu: Correct error message for errors
- tss2-rc: fix unknown laer handler dropping bits.
- fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
- fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
- build: fix build fail after make clean.
- mu: Fix unneeded size check in TPM2B unmarshaling.
- fapi: Fix missing parameter encryption.
- build: Fix failed build with --disable-vendor.
- fapi: Fix flush of persistent handles.
- fapi: Fix test provisioning with template with self generated certificate disabled.
- fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
- fapi: Revert pcr extension for EV_NO_ACTION events.
- fapi: Fix strange error messages if nv, ext, or policy path does not exits.
- fapi: Fix segfault caused by wrong allocation of pcr policy.
- esys: Fix leak in Esys_EvictControl for persistent handles.
- tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
- esys: Add reference counting for Esys_TR_FromTPMPublic.
- esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
- fapi: fix usage of self signed certificates in TPM.
- fapi: Usage of self signed certificates.
- fapi: A segfault after the error handling of non existing keys.
- fapi: Fix several leaks.
- fapi: Fix error handling for policy execution.
- fapi: Fix usage of persistent handles (should not be flushed)
- fapi: Fix test provisioning with template (skip test without self generated certificate).
- fapi: Fix pcr extension for EV_NO_ACTION
- test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
- tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
- fapi: Fix read large system eventlog (> UINT16_MAX).
- esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
- test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
- fapi: Fix possible null pointer dereferencing in Fapi_List.
- sys: Fix size check in Tss2_Sys_GetCapability.
- esys: Fix leak in Esys_TR_FromTPMPublic.
- esys: fix unchecked return value in esys crypto.
- fapi: Fix wrong usage of local variable in provisioning.
- fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
- fapi: Fix possible out of bound array access in IMA parser.
- tcti device: Fix possible unmarshalling from uninitialized variable.
- fapi: Fix error checking authorization of signing key.
- fapi: Fix cleanup of policy sessions.
- fapi: Eventlog H-CRTM events and different localities.
- fapi: Fix missing synchronization of quote and eventlog.
- faii: Fix invalid free in Fapi_Quote with empty eventlog.
+ Added
- tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
- mbedtls: add sha512 hmac.
- fapi: Enable usage of external keys for Fapi_Encrypt.
- fapi: Support download of AMD certificates.
- tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
- fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
- rc: New TPM return codes added.
- fapi: Further Nuvoton certificates added.
- tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
- tcti: Add '/dev/tcm0' to default conf
- fapi: New Nuvoton certificates added.
- esys: Fix leak in Esys_TR_FromTPMPublic.
+ Removed
- Testing on Ubuntu 18.04 as it's near EOL (May 2023).
tpm2.0-tools:
Update to version 5.7:
+ Security
- CVE-2024-29038: arbitrary quote data may go undetected by tpm2_checkquote (bsc#1223687)
- CVE-2024-29039: pcr selection value is not compared with the attest (bsc#1223689)
+ Fixed
- Fix eventlog test
- Fix issues with reading NV indexes
- Fix context save error on tpm2_create
- tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail
- when attempting to context save a flushed session.
- detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto.
- tpm2_send: fix EOF detection on input stream.
- tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
- tpm2_nvread: fix input handling no nv index.
- Auth file: Ensure 0-termination when reading auths from a file.
- configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh.
- cirrus.yml fix tss compilation with libtpms for FreeBSD.
- tpm2_tool.c Fix missing include for basename to enable compilation on netbsd.
- options: fix TCTI handling to avoid failures for commands that should work with no options.
- tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed.
+ Added
- Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option)
+ Removed
- Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
- tpm2_nvread: fix input handling no nv index.
- Update to version 5.6
+ tpm2_eventlog:
* add H-CRTM event support
* add support of efivar versions less than 38
* Add support to check for efivar/efivar.h manually
* Minor formatting fixes
* tpm2_eventlog: add support for replay with different StartupLocality
* Fix pcr extension for EV_NO_ACTION
* Extend test of yaml string representation
* Use helper for printing a string dump
* Fix upper bound on unique data size
* Fix YAML string formatting
+ tpm2_policy:
* Add support for parsing forward seal TPM values
* Use forward seal values in creating policies
* Move dgst_size in evaluate_populate_pcr_digests()
* Allow more than 8 PCRs for sealing
* Move dgst_size in evaluate_populate_pcr_digests
* Allow more than 8 PCRs for sealing
* Make __wrap_Esys_PCR_Read() more dynamic to enable testing more PCRs
+ tpm2_encryptdecrypt: Fix pkcs7 padding stripping
+ tpm2_duplicate:
* Support -a option for attributes
* Add --key-algorithm option
+ tpm2_encodeobject: Use the correct -O option instead of -C
+ tpm2_unseal: Add qualifier static to enhance the privacy of unseal
function
+ tpm2_sign:
* Remove -m option which was added mistakenly
* Revert sm2 sign and verifysignature
+ tpm2_createek:
* Correct man page example
* Fix usage of nonce
* Fix integrating nonce
+ tpm2_clear: add more details about the action
+ tpm2_startauthsession: allow the file attribute for policy
authorization.
+ tpm2_getekcertificate: Add AMD EK support
+ tpm2_ecdhzgen: Add public-key parameter
+ tpm2_nvreadpublic: Prevent free of unallocated pointers on failure
+ Bug-fixes:
* The readthedocs build failed with module 'jinja2' has no
attribute 'contextfilter' a requirement file was added to fix
this problem
* An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa
implementation. This error can be avoided by switching off the
optimization with pragma
* Changed wrong function name of "Esys_Load" to "Esys_Load"
* Function names beginning with Esys_ are wrongly written as Eys_
* Reading and writing a serialized persistent ESYS_TR handles
* cirrus-ci update image-family to freebsd-13-2 from 13-1
+ misc:
* Change the default Python version to Python3 in the helper's code
* Skip test which uses the sign operator for comparison in
abrmd_policynv.sh
* tools/tr_encode: Add a tool that can encode serialized ESYS_TR
for persistent handles from the TPM2B_PUBLIC and the raw
persistent TPM2_HANDLE
* Add safe directory in config
Patchnames
SUSE-SLE-Micro-6.0-250
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tpm2.0-tools, tpm2-0-tss",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for tpm2.0-tools, tpm2-0-tss fixes the following issues:\n\ntpm2-0-tss:\n Update to version 4.1:\n + Security\n - CVE-2024-29040: arbitrary quote data may go undetected by Fapi_VerifyQuote (bsc#1223690)\n\n + Fixed\n - fapi: Fix length check on FAPI auth callbacks\n - mu: Correct error message for errors\n - tss2-rc: fix unknown laer handler dropping bits.\n - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).\n - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.\n - build: fix build fail after make clean.\n - mu: Fix unneeded size check in TPM2B unmarshaling.\n - fapi: Fix missing parameter encryption.\n - build: Fix failed build with --disable-vendor.\n - fapi: Fix flush of persistent handles.\n - fapi: Fix test provisioning with template with self generated certificate disabled.\n - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.\n - fapi: Revert pcr extension for EV_NO_ACTION events.\n - fapi: Fix strange error messages if nv, ext, or policy path does not exits.\n - fapi: Fix segfault caused by wrong allocation of pcr policy.\n - esys: Fix leak in Esys_EvictControl for persistent handles.\n - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.\n - esys: Add reference counting for Esys_TR_FromTPMPublic.\n - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.\n - fapi: fix usage of self signed certificates in TPM.\n - fapi: Usage of self signed certificates.\n - fapi: A segfault after the error handling of non existing keys.\n - fapi: Fix several leaks.\n - fapi: Fix error handling for policy execution.\n - fapi: Fix usage of persistent handles (should not be flushed)\n - fapi: Fix test provisioning with template (skip test without self generated certificate).\n - fapi: Fix pcr extension for EV_NO_ACTION\n - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile\n - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set\n - fapi: Fix read large system eventlog (\u003e UINT16_MAX).\n - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)\n - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.\n - fapi: Fix possible null pointer dereferencing in Fapi_List.\n - sys: Fix size check in Tss2_Sys_GetCapability.\n - esys: Fix leak in Esys_TR_FromTPMPublic.\n - esys: fix unchecked return value in esys crypto.\n - fapi: Fix wrong usage of local variable in provisioning.\n - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.\n - fapi: Fix possible out of bound array access in IMA parser.\n - tcti device: Fix possible unmarshalling from uninitialized variable.\n - fapi: Fix error checking authorization of signing key.\n - fapi: Fix cleanup of policy sessions.\n - fapi: Eventlog H-CRTM events and different localities.\n - fapi: Fix missing synchronization of quote and eventlog.\n - faii: Fix invalid free in Fapi_Quote with empty eventlog.\n\n + Added\n - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.\n - mbedtls: add sha512 hmac.\n - fapi: Enable usage of external keys for Fapi_Encrypt.\n - fapi: Support download of AMD certificates.\n - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.\n - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.\n - rc: New TPM return codes added.\n - fapi: Further Nuvoton certificates added.\n - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.\n - tcti: Add \u0027/dev/tcm0\u0027 to default conf\n - fapi: New Nuvoton certificates added.\n - esys: Fix leak in Esys_TR_FromTPMPublic.\n\n + Removed\n - Testing on Ubuntu 18.04 as it\u0027s near EOL (May 2023).\n\n\ntpm2.0-tools:\n Update to version 5.7:\n + Security\n - CVE-2024-29038: arbitrary quote data may go undetected by tpm2_checkquote (bsc#1223687)\n - CVE-2024-29039: pcr selection value is not compared with the attest (bsc#1223689)\n + Fixed\n - Fix eventlog test\n - Fix issues with reading NV indexes\n - Fix context save error on tpm2_create\n - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail\n - when attempting to context save a flushed session.\n - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto.\n - tpm2_send: fix EOF detection on input stream.\n - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.\n - tpm2_nvread: fix input handling no nv index.\n - Auth file: Ensure 0-termination when reading auths from a file.\n - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh.\n - cirrus.yml fix tss compilation with libtpms for FreeBSD.\n - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd.\n - options: fix TCTI handling to avoid failures for commands that should work with no options.\n - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed.\n + Added\n - Add the possibility for autoflush (environment variable \"TPM2TOOLS_AUTOFLUSH\", or -R option)\n + Removed\n - Testing on Ubuntu 18.04 as it\u0027s near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.\n - tpm2_nvread: fix input handling no nv index.\n\n - Update to version 5.6\n + tpm2_eventlog:\n * add H-CRTM event support\n * add support of efivar versions less than 38\n * Add support to check for efivar/efivar.h manually\n * Minor formatting fixes\n * tpm2_eventlog: add support for replay with different StartupLocality\n * Fix pcr extension for EV_NO_ACTION\n * Extend test of yaml string representation\n * Use helper for printing a string dump\n * Fix upper bound on unique data size\n * Fix YAML string formatting\n + tpm2_policy:\n * Add support for parsing forward seal TPM values\n * Use forward seal values in creating policies\n * Move dgst_size in evaluate_populate_pcr_digests()\n * Allow more than 8 PCRs for sealing\n * Move dgst_size in evaluate_populate_pcr_digests\n * Allow more than 8 PCRs for sealing\n * Make __wrap_Esys_PCR_Read() more dynamic to enable testing more PCRs\n + tpm2_encryptdecrypt: Fix pkcs7 padding stripping\n + tpm2_duplicate:\n * Support -a option for attributes\n * Add --key-algorithm option\n + tpm2_encodeobject: Use the correct -O option instead of -C\n + tpm2_unseal: Add qualifier static to enhance the privacy of unseal\n function\n + tpm2_sign:\n * Remove -m option which was added mistakenly\n * Revert sm2 sign and verifysignature\n + tpm2_createek:\n * Correct man page example\n * Fix usage of nonce\n * Fix integrating nonce\n + tpm2_clear: add more details about the action\n + tpm2_startauthsession: allow the file attribute for policy\n authorization.\n + tpm2_getekcertificate: Add AMD EK support\n + tpm2_ecdhzgen: Add public-key parameter\n + tpm2_nvreadpublic: Prevent free of unallocated pointers on failure\n + Bug-fixes:\n * The readthedocs build failed with module \u0027jinja2\u0027 has no\n attribute \u0027contextfilter\u0027 a requirement file was added to fix\n this problem\n * An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa\n implementation. This error can be avoided by switching off the\n optimization with pragma\n * Changed wrong function name of \"Esys_Load\" to \"Esys_Load\"\n * Function names beginning with Esys_ are wrongly written as Eys_\n * Reading and writing a serialized persistent ESYS_TR handles\n * cirrus-ci update image-family to freebsd-13-2 from 13-1\n + misc:\n * Change the default Python version to Python3 in the helper\u0027s code\n * Skip test which uses the sign operator for comparison in\n abrmd_policynv.sh\n * tools/tr_encode: Add a tool that can encode serialized ESYS_TR\n for persistent handles from the TPM2B_PUBLIC and the raw\n persistent TPM2_HANDLE\n * Add safe directory in config\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-250",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20151-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:20151-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520151-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:20151-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021188.html"
},
{
"category": "self",
"summary": "SUSE Bug 1223687",
"url": "https://bugzilla.suse.com/1223687"
},
{
"category": "self",
"summary": "SUSE Bug 1223689",
"url": "https://bugzilla.suse.com/1223689"
},
{
"category": "self",
"summary": "SUSE Bug 1223690",
"url": "https://bugzilla.suse.com/1223690"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-29038 page",
"url": "https://www.suse.com/security/cve/CVE-2024-29038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-29039 page",
"url": "https://www.suse.com/security/cve/CVE-2024-29039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-29040 page",
"url": "https://www.suse.com/security/cve/CVE-2024-29040/"
}
],
"title": "Security update for tpm2.0-tools, tpm2-0-tss",
"tracking": {
"current_release_date": "2025-03-18T10:58:34Z",
"generator": {
"date": "2025-03-18T10:58:34Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:20151-1",
"initial_release_date": "2025-03-18T10:58:34Z",
"revision_history": [
{
"date": "2025-03-18T10:58:34Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libefivar1-38-3.1.aarch64",
"product": {
"name": "libefivar1-38-3.1.aarch64",
"product_id": "libefivar1-38-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-esys0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-esys0-4.1.0-1.1.aarch64",
"product_id": "libtss2-esys0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-fapi-common-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-fapi-common-4.1.0-1.1.aarch64",
"product_id": "libtss2-fapi-common-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-fapi1-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-fapi1-4.1.0-1.1.aarch64",
"product_id": "libtss2-fapi1-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-mu0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-mu0-4.1.0-1.1.aarch64",
"product_id": "libtss2-mu0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-rc0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-rc0-4.1.0-1.1.aarch64",
"product_id": "libtss2-rc0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-sys1-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-sys1-4.1.0-1.1.aarch64",
"product_id": "libtss2-sys1-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-device0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-tcti-device0-4.1.0-1.1.aarch64",
"product_id": "libtss2-tcti-device0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"product_id": "libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"product_id": "libtss2-tcti-spidev0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtss2-tctildr0-4.1.0-1.1.aarch64",
"product": {
"name": "libtss2-tctildr0-4.1.0-1.1.aarch64",
"product_id": "libtss2-tctildr0-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "tpm2-0-tss-4.1.0-1.1.aarch64",
"product": {
"name": "tpm2-0-tss-4.1.0-1.1.aarch64",
"product_id": "tpm2-0-tss-4.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "tpm2.0-tools-5.7-1.1.aarch64",
"product": {
"name": "tpm2.0-tools-5.7-1.1.aarch64",
"product_id": "tpm2.0-tools-5.7-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libefivar1-38-3.1.s390x",
"product": {
"name": "libefivar1-38-3.1.s390x",
"product_id": "libefivar1-38-3.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-esys0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-esys0-4.1.0-1.1.s390x",
"product_id": "libtss2-esys0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-fapi-common-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-fapi-common-4.1.0-1.1.s390x",
"product_id": "libtss2-fapi-common-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-fapi1-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-fapi1-4.1.0-1.1.s390x",
"product_id": "libtss2-fapi1-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-mu0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-mu0-4.1.0-1.1.s390x",
"product_id": "libtss2-mu0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-rc0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-rc0-4.1.0-1.1.s390x",
"product_id": "libtss2-rc0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-sys1-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-sys1-4.1.0-1.1.s390x",
"product_id": "libtss2-sys1-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-device0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-tcti-device0-4.1.0-1.1.s390x",
"product_id": "libtss2-tcti-device0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"product_id": "libtss2-tcti-spi-helper0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"product_id": "libtss2-tcti-spidev0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libtss2-tctildr0-4.1.0-1.1.s390x",
"product": {
"name": "libtss2-tctildr0-4.1.0-1.1.s390x",
"product_id": "libtss2-tctildr0-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "tpm2-0-tss-4.1.0-1.1.s390x",
"product": {
"name": "tpm2-0-tss-4.1.0-1.1.s390x",
"product_id": "tpm2-0-tss-4.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "tpm2.0-tools-5.7-1.1.s390x",
"product": {
"name": "tpm2.0-tools-5.7-1.1.s390x",
"product_id": "tpm2.0-tools-5.7-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libefivar1-38-3.1.x86_64",
"product": {
"name": "libefivar1-38-3.1.x86_64",
"product_id": "libefivar1-38-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-esys0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-esys0-4.1.0-1.1.x86_64",
"product_id": "libtss2-esys0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-fapi-common-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-fapi-common-4.1.0-1.1.x86_64",
"product_id": "libtss2-fapi-common-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-fapi1-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-fapi1-4.1.0-1.1.x86_64",
"product_id": "libtss2-fapi1-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-mu0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-mu0-4.1.0-1.1.x86_64",
"product_id": "libtss2-mu0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-rc0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-rc0-4.1.0-1.1.x86_64",
"product_id": "libtss2-rc0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-sys1-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-sys1-4.1.0-1.1.x86_64",
"product_id": "libtss2-sys1-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-device0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-tcti-device0-4.1.0-1.1.x86_64",
"product_id": "libtss2-tcti-device0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"product_id": "libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"product_id": "libtss2-tcti-spidev0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtss2-tctildr0-4.1.0-1.1.x86_64",
"product": {
"name": "libtss2-tctildr0-4.1.0-1.1.x86_64",
"product_id": "libtss2-tctildr0-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "tpm2-0-tss-4.1.0-1.1.x86_64",
"product": {
"name": "tpm2-0-tss-4.1.0-1.1.x86_64",
"product_id": "tpm2-0-tss-4.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "tpm2.0-tools-5.7-1.1.x86_64",
"product": {
"name": "tpm2.0-tools-5.7-1.1.x86_64",
"product_id": "tpm2.0-tools-5.7-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libefivar1-38-3.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64"
},
"product_reference": "libefivar1-38-3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libefivar1-38-3.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x"
},
"product_reference": "libefivar1-38-3.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libefivar1-38-3.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64"
},
"product_reference": "libefivar1-38-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-esys0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-esys0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-esys0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-esys0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-esys0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-esys0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-fapi-common-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-fapi-common-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-fapi-common-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-fapi-common-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-fapi-common-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-fapi-common-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-fapi1-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-fapi1-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-fapi1-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-fapi1-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-fapi1-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-fapi1-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-mu0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-mu0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-mu0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-mu0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-mu0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-mu0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-rc0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-rc0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-rc0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-rc0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-rc0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-rc0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-sys1-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-sys1-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-sys1-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-sys1-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-sys1-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-sys1-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-device0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-tcti-device0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-device0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-tcti-device0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-device0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-tcti-device0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-spidev0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-spidev0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tcti-spidev0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tctildr0-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64"
},
"product_reference": "libtss2-tctildr0-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tctildr0-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x"
},
"product_reference": "libtss2-tctildr0-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtss2-tctildr0-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64"
},
"product_reference": "libtss2-tctildr0-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tpm2-0-tss-4.1.0-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64"
},
"product_reference": "tpm2-0-tss-4.1.0-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tpm2-0-tss-4.1.0-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x"
},
"product_reference": "tpm2-0-tss-4.1.0-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tpm2-0-tss-4.1.0-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64"
},
"product_reference": "tpm2-0-tss-4.1.0-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tpm2.0-tools-5.7-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64"
},
"product_reference": "tpm2.0-tools-5.7-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tpm2.0-tools-5.7-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x"
},
"product_reference": "tpm2.0-tools-5.7-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tpm2.0-tools-5.7-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
},
"product_reference": "tpm2.0-tools-5.7-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-29038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-29038"
}
],
"notes": [
{
"category": "general",
"text": "tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-29038",
"url": "https://www.suse.com/security/cve/CVE-2024-29038"
},
{
"category": "external",
"summary": "SUSE Bug 1223687 for CVE-2024-29038",
"url": "https://bugzilla.suse.com/1223687"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-18T10:58:34Z",
"details": "moderate"
}
],
"title": "CVE-2024-29038"
},
{
"cve": "CVE-2024-29039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-29039"
}
],
"notes": [
{
"category": "general",
"text": "tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-29039",
"url": "https://www.suse.com/security/cve/CVE-2024-29039"
},
{
"category": "external",
"summary": "SUSE Bug 1223689 for CVE-2024-29039",
"url": "https://bugzilla.suse.com/1223689"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-18T10:58:34Z",
"details": "moderate"
}
],
"title": "CVE-2024-29039"
},
{
"cve": "CVE-2024-29040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-29040"
}
],
"notes": [
{
"category": "general",
"text": "This repository hosts source code implementing the Trusted Computing Group\u0027s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn\u0027t, or can use services it shouldn\u0027t be able to. This \nissue has been patched in version 4.1.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-29040",
"url": "https://www.suse.com/security/cve/CVE-2024-29040"
},
{
"category": "external",
"summary": "SUSE Bug 1223690 for CVE-2024-29040",
"url": "https://bugzilla.suse.com/1223690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libefivar1-38-3.1.aarch64",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.s390x",
"SUSE Linux Micro 6.0:libefivar1-38-3.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-esys0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi-common-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-fapi1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-mu0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-rc0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-sys1-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-device0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spi-helper0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tcti-spidev0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:libtss2-tctildr0-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2-0-tss-4.1.0-1.1.x86_64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.aarch64",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.s390x",
"SUSE Linux Micro 6.0:tpm2.0-tools-5.7-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-18T10:58:34Z",
"details": "moderate"
}
],
"title": "CVE-2024-29040"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…