Red Hat Product Errata RHBA-2025:20981 - Bug Fix Advisory
Issued:
2025-11-11
Updated:
2025-11-11

RHBA-2025:20981 - Bug Fix Advisory

Synopsis

keylime bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for keylime is now available for Red Hat Enterprise Linux 10.

Description

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Bug Fix(es) and Enhancement(s):

  • keylime no longer supports the workaround to use TPMs with malformed EK certificate [rhel-10.1.z] (JIRA:RHEL-111239)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
keylime-7.12.1-11.el10_1.2.src.rpm SHA-256: 7207e5ced2bfed56d87e7b5162953fd2fb5a84dad4203dd4129f56506913b354
x86_64
keylime-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: ee94c604fa2ee67be339a60a1f489baf6226a3255f0918937898ddf1b33ec651
keylime-base-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: f479fd5c0596323da1dc4922de33baa1d50bd09b69d9c174117d6688758237fd
keylime-registrar-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: e1c7696443070dbf5a9536e059e00f7a46b84053ecc684f934db6800dc408234
keylime-selinux-7.12.1-11.el10_1.2.noarch.rpm SHA-256: e8b16a8358ae5830213247cbc3315ebaca9d1bad06da5b3f1be6a965fd56d042
keylime-tenant-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: 4cff9901a90274dbb4fb446aa50d7efc0c2a8b412d658900b6e96fd7507cd99d
keylime-tools-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: 03274065137927709bbb05817b3e5fc732f3172387601d9fe8c6ecc590c55f0c
keylime-verifier-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: 93b5f7b59c2a0134bb1f3ff5d0794637d7d8e569809f7fbb25feac27f8b5d49b
python3-keylime-7.12.1-11.el10_1.2.x86_64.rpm SHA-256: 6873a02c3ded6afa2dc6c6c8c4befc0b20be367699f8fa7f2ff36b26e00145c1

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
keylime-7.12.1-11.el10_1.2.src.rpm SHA-256: 7207e5ced2bfed56d87e7b5162953fd2fb5a84dad4203dd4129f56506913b354
s390x
keylime-7.12.1-11.el10_1.2.s390x.rpm SHA-256: 53069379c970a64902adb5e3b30549206025d70f1be64c77901b91ec1510ee78
keylime-base-7.12.1-11.el10_1.2.s390x.rpm SHA-256: 984844cdd01d0ebe580b91ce30ff0943aae00c45c037172cf8f3810177d5a499
keylime-registrar-7.12.1-11.el10_1.2.s390x.rpm SHA-256: 05352be6efdaa37790d2817548ed4ba55d42e7b1bbc6668a8e996c1a3d248275
keylime-selinux-7.12.1-11.el10_1.2.noarch.rpm SHA-256: e8b16a8358ae5830213247cbc3315ebaca9d1bad06da5b3f1be6a965fd56d042
keylime-tenant-7.12.1-11.el10_1.2.s390x.rpm SHA-256: 08c00f3d62d3adb268d642abe56e1b953b5528cab3b921781d5d4dd2b2eccedb
keylime-tools-7.12.1-11.el10_1.2.s390x.rpm SHA-256: 2c5c042f40898cba8cf18fb00bdd7a6665c484f83170e96376ce8de34cfc8dee
keylime-verifier-7.12.1-11.el10_1.2.s390x.rpm SHA-256: dedb80cb03d145a31daaa56e17fd4185285231fd5618261c0992427df083c2a1
python3-keylime-7.12.1-11.el10_1.2.s390x.rpm SHA-256: 4aea0b3cd65328b19517b0128daa0422a82dc77f45e80e587edec97448516618

Red Hat Enterprise Linux for Power, little endian 10

SRPM
keylime-7.12.1-11.el10_1.2.src.rpm SHA-256: 7207e5ced2bfed56d87e7b5162953fd2fb5a84dad4203dd4129f56506913b354
ppc64le
keylime-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: 99cc765f7f31fd42c00e2ab3480c74eb76a762f3314933b46ae255c09ae5dc5e
keylime-base-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: 10fe55af8016cad841d524c6471d52aa06808ff8e0f57880f9a5c30683700475
keylime-registrar-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: 46758b9f5e2d073e362dcc1235d3e5963a1fd58d01fa5c3adf4e94d5d4c65822
keylime-selinux-7.12.1-11.el10_1.2.noarch.rpm SHA-256: e8b16a8358ae5830213247cbc3315ebaca9d1bad06da5b3f1be6a965fd56d042
keylime-tenant-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: a23ee1f748678efea8df4db6446ce75692d8761a91d0a8d5018daec54895d3d2
keylime-tools-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: cfb24791f57746ea446ebf0d33942ecc8fed111946be401ab0b8d20c912973b0
keylime-verifier-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: 788e75111b1d6037c5505d3a69ef97bcfc8f76ecb9a1bbdf4081faa828a8c250
python3-keylime-7.12.1-11.el10_1.2.ppc64le.rpm SHA-256: e4833ea6220a3493114826f3cc6150bcfe70223692dec1b48ff2f8028cd82c54

Red Hat Enterprise Linux for ARM 64 10

SRPM
keylime-7.12.1-11.el10_1.2.src.rpm SHA-256: 7207e5ced2bfed56d87e7b5162953fd2fb5a84dad4203dd4129f56506913b354
aarch64
keylime-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: c49669414cfe44751322064b00f913aecbfb3877412dc1bdc06cf9ec6578ee3f
keylime-base-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: 33024ad1566398edf04f42527d82a25bb060b4d67054efa0bfea7317c6190081
keylime-registrar-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: 16b3502ff4d26bbe11acc568e8883c398ae1ebd03587c2b54df8608f0eb24ab8
keylime-selinux-7.12.1-11.el10_1.2.noarch.rpm SHA-256: e8b16a8358ae5830213247cbc3315ebaca9d1bad06da5b3f1be6a965fd56d042
keylime-tenant-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: 4cb7040f32df5b93a505bc3dee01936bd52ae67e100ed609459d21d01c079961
keylime-tools-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: 003b274e11c650941bbf84871ca13b0a36045025c0283f849260beb5b56f770d
keylime-verifier-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: 1cdcccef5ea4ee6760bbd0875b64f9f7020443f043971b7c224239e1e89776cd
python3-keylime-7.12.1-11.el10_1.2.aarch64.rpm SHA-256: c2b85403f87f471549eeaa351f33c9b257ca4e81becb25e2545b91c5583fb439

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.