{"id":"SUSE-SU-2026:24114-1","summary":"Security update for swtpm","details":"This update for swtpm fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch\n  (bsc#1275653).\n\nChanges for swtpm:\n\nUpdate to 0.10.2:\n\n* Properly check for truncation following snprintf call\n- add upstream signing key and validate source signature\n- Fix SELinux policy for virtqemud_t swtpm_t setsched\n process and unix socket interactions. Allows virtqemud_t to: Signal and\n control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched),\n create and listen on Unix stream sockets with swtpm_t processes (bsc#1266339).\n Already accepted on upstream:\n https://github.com/stefanberger/swtpm/pull/1132\n- Drop tunable in require to avoid policy loading issues\n with toolchain 3.11 (bsc#1271417).\n Can be dropped, once this is accepted upstream:\n https://github.com/stefanberger/swtpm/pull/1139\n- Update SELinux module dir as macro to allow root path move from /var/lib/selinux\n to /etc/selinux (bsc#1221342)\n- Also load swtpm_libvirt in the selinux subpackage (bsc#1251789)\n- Update to version 0.10.1:\n + swtpm: Fix build error on 32bit systems due to inconsistent\n _FILE_OFFSET_BITS.\n + swtpm_setup:\n - Use DISTRO_PROFILES_DIR when listing profiles (fix path\n issue).\n - Do not pass a TPM 2 profile to swtpm when reconfiguring.\n + selinux:\n - Add rule for swtpm to be able to read password from pipe.\n - allow to map state file.\n - add NFS permissions for swtpm_t.\n - Add rule to allow swtpm_t opening of virt_log_t files.\n","modified":"2026-10-10T17:23:22.237967615Z","published":"2026-10-07T09:30:38Z","related":["CVE-2026-75900"],"upstream":["CVE-2026-75900"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624114-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1221342"},{"type":"REPORT","url":"https://bugzilla.suse.com/1251789"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266339"},{"type":"REPORT","url":"https://bugzilla.suse.com/1271417"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275653"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-75900"}],"affected":[{"package":{"name":"swtpm","ecosystem":"SUSE:Linux Micro 6.2","purl":"pkg:rpm/suse/swtpm&distro=SUSE%20Linux%20Micro%206.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-160000.1.1"}]}],"ecosystem_specific":{"binaries":[{"swtpm":"0.10.2-160000.1.1","swtpm-selinux":"0.10.2-160000.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24114-1.json"}}],"schema_version":"1.9.0"}