Threat database

Two security vulnerabilities were identified in the tpm2-tools package used on Red Hat Enterprise Linux 9. The first vulnerability (CVE-2024-29038) allows arbitrary quote data to go undetected by the tpm2_checkquote utility. The second vulnerability (CVE-2024-29039) involves the PCR selection value not being compared with the attest, potentially undermining integrity checks. Red Hat has issued a security update addressing these issues with a low severity rating. The update is available for multiple Red Hat Enterprise Linux 9 variants and architectures.