Skip to content

Commit cde422b

Browse files
committed
doc/CHANGELOG.md: update changelog for 5.1.1-rc0 CVE-fix
Signed-off-by: Imran Desai <imran.desai@intel.com>
1 parent 47b3b6e commit cde422b

1 file changed

Lines changed: 8 additions & 0 deletions

File tree

doc/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,13 @@
11
## Changelog
22

3+
### 5.1.1-rc0 2021-05-28
4+
5+
* tpm2_import: fix fixed AES key CVE-2021-3565
6+
- tpm2_import used a fixed AES key for the inner wrapper, which means that
7+
a MITM attack would be able to unwrap the imported key. To fix this,
8+
ensure the key size is 16 bytes or bigger and use OpenSSL to generate a
9+
secure random AES key.
10+
311
### 5.1 2021-05-24
412

513
* Build

0 commit comments

Comments
 (0)