ASA-202107-9 log generated external raw

[ASA-202107-9] libtpms: information disclosure
Arch Linux Security Advisory ASA-202107-9 ========================================= Severity: Medium Date : 2021-07-01 CVE-ID : CVE-2021-3623 Package : libtpms Type : information disclosure Remote : No Link : Summary ======= The package libtpms before version 0.8.4-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 0.8.4-1. # pacman -Syu "libtpms>=0.8.4-1" The problem has been fixed upstream in version 0.8.4. Workaround ========== None. Description =========== A security issue was found in libtpms before version 0.8.4. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. Impact ====== An attacker could disclose sensitive information about the state of the TPM through crafted command packets. References ==========