The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-keylimeUpgrade keylime-verifierUpgrade keylimeUpgrade keylime-registrarUpgrade keylime-tenantUpgrade keylime-selinuxUpgrade keylime-base | Feb 13, 2026 | Feb 9, 2026 |
| Oracle_linux | — | Upgrade keylime-selinuxUpgrade keylimeUpgrade keylime-tenantUpgrade keylime-toolsUpgrade python3-keylimeUpgrade keylime-registrarUpgrade keylime-verifierUpgrade keylime-base | Feb 11, 2026 | Feb 6, 2026 |
| Redhat_linux | — | Upgrade keylime-registrarUpgrade keylimeUpgrade keylime-baseUpgrade keylime-selinuxUpgrade keylime-verifierUpgrade keylime-tenantUpgrade keylime-toolsUpgrade python3-keylime | Feb 10, 2026 | Feb 6, 2026 |
| Rocky_linux | — | Upgrade python3-keylimeUpgrade keylime-verifierUpgrade keylime-registrarUpgrade keylime-toolsUpgrade keylime-baseUpgrade keylimeUpgrade keylime-tenant | Feb 13, 2026 | Feb 11, 2026 |
| Suse | — | Upgrade keylime-tenantUpgrade keylime-firewalldUpgrade keylime-verifierUpgrade keylime-tpm_cert_storeUpgrade keylime-registrarUpgrade python313-keylimeUpgrade keylime-configUpgrade keylime-logrotate | Mar 27, 2026 | Mar 27, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub