Date: Tue, 29 Jul 2014 11:30:53 +0200 From: Marcus Meissner <meissner@...e.de> To: OSS Security List <oss-security@...ts.openwall.com> Subject: CVE Request: tboot failing to measure commandline parameters Hi, The trusted boot loader module "tboot" did not measure all commandline parameters, which made it possible to pretend a measured boot while there was workaround possibility (breaking the measured boot chain). All previous tboot versions < 1.8.2 are affected. http://sourceforge.net/p/tboot/code/ci/0efdaf7c5348701484d24562e6e5323d85bb94d3/ http://sourceforge.net/p/tboot/mailman/message/32655538/ http://sourceforge.net/p/tboot/mailman/message/32659733/ A CVE is needed I think. Ciao, Marcus
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ