yocto@lists.yoctoproject.org
Subject: [yocto] [PATCH] tpm2-tools: fix CVE-2024-29039
From: Divya Chellam
tpm2 is the source repository for the Trusted Platform Module (TPM2.0)
tools. This vulnerability allows attackers to manipulate tpm2_checkquote
outputs by altering the TPML_PCR_SELECTION in the PCR input file
From: Divya Chellam
tpm2 is the source repository for the Trusted Platform Module (TPM2.0)
tools. This vulnerability allows attackers to manipulate tpm2_checkquote
outputs by altering the TPML_PCR_SELECTION in the PCR input file.
As a result, digest values are incorrectly mapped to PCR slots and