{"id":"MGASA-2020-0417","summary":"Updated tpm2-tss packages fix a security vulnerability","details":"FAPI PolicyPCR not instatiating correctly (CVE-2020-24455).\n\nNote that all TPM object created with a PolicyPCR with the currentPcrs\nand currentPcrsAndBank options have been created with an incorrect policy\nthat omits PCR checks. All such objects have to be recreated.\n\nThe tpm2-tss package has been updated to version 2.4.3, which includes a fix\nfor this issue and several other changes.  See the upstream release\nannouncements for details.\n","modified":"2026-04-16T00:09:32.772616861Z","published":"2020-11-13T21:20:36Z","upstream":["CVE-2020-24455"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2020-0417.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=27412"},{"type":"WEB","url":"https://github.com/tpm2-software/tpm2-tss/releases/tag/2.4.3"},{"type":"WEB","url":"https://github.com/tpm2-software/tpm2-tss/releases"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KBRTMYDRPQBDGNADVXGI745WGT2MGVOO/"}],"affected":[{"package":{"name":"tpm2-tss","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/tpm2-tss?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0417.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}