Red Hat Product Errata RHBA-2025:7312 - Bug Fix Advisory
Issued:
2025-05-13
Updated:
2025-05-13

RHBA-2025:7312 - Bug Fix Advisory

Synopsis

keylime bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for keylime is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.6 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

  • RHEL-75797 - Backport keylime-policy tool to RHEL9
  • RHEL-78057 - keylime revocation notifier fails to connect over TLS
  • RHEL-78313 - keylime does not require TLS between verifier and revocation notification webhook
  • RHEL-78316 - keylime does not use CA certificates from configuration when verifying revocation notification webhook certificate

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
x86_64
keylime-7.3.0-15.el9.x86_64.rpm SHA-256: dcbf54895b8c4ecbb6c8c5663cff2503decd8c85fbef88b8d704b943be46eeb1
keylime-base-7.3.0-15.el9.x86_64.rpm SHA-256: 09b7a3e6870b3d41b709bccaf00542cbc30bbf8d5a616e791e81ef08c84171b8
keylime-registrar-7.3.0-15.el9.x86_64.rpm SHA-256: 5384032b0710015af99be10e540577888ecd93b3e24b8ca68e2a12c4cccdbee8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.x86_64.rpm SHA-256: 9cfb467b1acabc5d1bfcb59da397d3e44f34b542ddfb61d6e8e29bcc878c8b40
keylime-verifier-7.3.0-15.el9.x86_64.rpm SHA-256: 4995bf52aef50cdb52020e24f3be36d199b64f31b22ce865f8d7201956f0566c
python3-keylime-7.3.0-15.el9.x86_64.rpm SHA-256: 9bbf13c9332c881dcd09f63c2d485807211cb577d2573187355b5135849c4bf6

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
x86_64
keylime-7.3.0-15.el9.x86_64.rpm SHA-256: dcbf54895b8c4ecbb6c8c5663cff2503decd8c85fbef88b8d704b943be46eeb1
keylime-base-7.3.0-15.el9.x86_64.rpm SHA-256: 09b7a3e6870b3d41b709bccaf00542cbc30bbf8d5a616e791e81ef08c84171b8
keylime-registrar-7.3.0-15.el9.x86_64.rpm SHA-256: 5384032b0710015af99be10e540577888ecd93b3e24b8ca68e2a12c4cccdbee8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.x86_64.rpm SHA-256: 9cfb467b1acabc5d1bfcb59da397d3e44f34b542ddfb61d6e8e29bcc878c8b40
keylime-verifier-7.3.0-15.el9.x86_64.rpm SHA-256: 4995bf52aef50cdb52020e24f3be36d199b64f31b22ce865f8d7201956f0566c
python3-keylime-7.3.0-15.el9.x86_64.rpm SHA-256: 9bbf13c9332c881dcd09f63c2d485807211cb577d2573187355b5135849c4bf6

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
x86_64
keylime-7.3.0-15.el9.x86_64.rpm SHA-256: dcbf54895b8c4ecbb6c8c5663cff2503decd8c85fbef88b8d704b943be46eeb1
keylime-base-7.3.0-15.el9.x86_64.rpm SHA-256: 09b7a3e6870b3d41b709bccaf00542cbc30bbf8d5a616e791e81ef08c84171b8
keylime-registrar-7.3.0-15.el9.x86_64.rpm SHA-256: 5384032b0710015af99be10e540577888ecd93b3e24b8ca68e2a12c4cccdbee8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.x86_64.rpm SHA-256: 9cfb467b1acabc5d1bfcb59da397d3e44f34b542ddfb61d6e8e29bcc878c8b40
keylime-verifier-7.3.0-15.el9.x86_64.rpm SHA-256: 4995bf52aef50cdb52020e24f3be36d199b64f31b22ce865f8d7201956f0566c
python3-keylime-7.3.0-15.el9.x86_64.rpm SHA-256: 9bbf13c9332c881dcd09f63c2d485807211cb577d2573187355b5135849c4bf6

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
s390x
keylime-7.3.0-15.el9.s390x.rpm SHA-256: c36d44346b48a3072dab6b928101818edfe81d5912bfed5595b9879adad49659
keylime-base-7.3.0-15.el9.s390x.rpm SHA-256: 5959b43d7d3b10b8cbbf9ebeb6263a417ed6fbdbec3065aad70bd988cdb6f873
keylime-registrar-7.3.0-15.el9.s390x.rpm SHA-256: a4395dda42527a052d8780ed8203d6d756de06edbdfa5be508b129fbbfd1b3a8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.s390x.rpm SHA-256: ad255a146eab28c2b5ce781994746c3296c8b81de9a8d85d05cae3ace49afd19
keylime-verifier-7.3.0-15.el9.s390x.rpm SHA-256: cdc67bd19aa3f6d7e52f2a1e12a2837c3a5771d68924311b6f37911f7b6c8dea
python3-keylime-7.3.0-15.el9.s390x.rpm SHA-256: a8b1bc3e3a70c61c601adf4cce02619577c2b972562628457140487a693b14b0

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
s390x
keylime-7.3.0-15.el9.s390x.rpm SHA-256: c36d44346b48a3072dab6b928101818edfe81d5912bfed5595b9879adad49659
keylime-base-7.3.0-15.el9.s390x.rpm SHA-256: 5959b43d7d3b10b8cbbf9ebeb6263a417ed6fbdbec3065aad70bd988cdb6f873
keylime-registrar-7.3.0-15.el9.s390x.rpm SHA-256: a4395dda42527a052d8780ed8203d6d756de06edbdfa5be508b129fbbfd1b3a8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.s390x.rpm SHA-256: ad255a146eab28c2b5ce781994746c3296c8b81de9a8d85d05cae3ace49afd19
keylime-verifier-7.3.0-15.el9.s390x.rpm SHA-256: cdc67bd19aa3f6d7e52f2a1e12a2837c3a5771d68924311b6f37911f7b6c8dea
python3-keylime-7.3.0-15.el9.s390x.rpm SHA-256: a8b1bc3e3a70c61c601adf4cce02619577c2b972562628457140487a693b14b0

Red Hat Enterprise Linux for Power, little endian 9

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
ppc64le
keylime-7.3.0-15.el9.ppc64le.rpm SHA-256: 1de2265d3608325642e048305dedf8a2af0ac171fc0d71e8fb9c031861194772
keylime-base-7.3.0-15.el9.ppc64le.rpm SHA-256: a5fb7f4dc79ef21522469698dd6cc04bea9b073b17e2cd20b3d8bec8ef693628
keylime-registrar-7.3.0-15.el9.ppc64le.rpm SHA-256: 6076fde6f5bc65c3aeaf7b7919c7e9d58cda0b2b19a5ab15f89468c8f33a4368
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.ppc64le.rpm SHA-256: f6ab6b12c18d0ab3aabfd2bb004bd30289f03d6e8138c55b8777c1bb4feb959f
keylime-verifier-7.3.0-15.el9.ppc64le.rpm SHA-256: f427ace320b3d67f887a0d8a43af61ea9d9ff8de013558dec1ea66bf7c486d29
python3-keylime-7.3.0-15.el9.ppc64le.rpm SHA-256: 439553c1e5fe8468cbf291d60110a04c7324b0596a0556cfabd344c7c306c2ad

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
ppc64le
keylime-7.3.0-15.el9.ppc64le.rpm SHA-256: 1de2265d3608325642e048305dedf8a2af0ac171fc0d71e8fb9c031861194772
keylime-base-7.3.0-15.el9.ppc64le.rpm SHA-256: a5fb7f4dc79ef21522469698dd6cc04bea9b073b17e2cd20b3d8bec8ef693628
keylime-registrar-7.3.0-15.el9.ppc64le.rpm SHA-256: 6076fde6f5bc65c3aeaf7b7919c7e9d58cda0b2b19a5ab15f89468c8f33a4368
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.ppc64le.rpm SHA-256: f6ab6b12c18d0ab3aabfd2bb004bd30289f03d6e8138c55b8777c1bb4feb959f
keylime-verifier-7.3.0-15.el9.ppc64le.rpm SHA-256: f427ace320b3d67f887a0d8a43af61ea9d9ff8de013558dec1ea66bf7c486d29
python3-keylime-7.3.0-15.el9.ppc64le.rpm SHA-256: 439553c1e5fe8468cbf291d60110a04c7324b0596a0556cfabd344c7c306c2ad

Red Hat Enterprise Linux for ARM 64 9

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
aarch64
keylime-7.3.0-15.el9.aarch64.rpm SHA-256: b1dc7c731d80067d70fa4221144115b6ca85ed0bd3de490df7e100747e2a6534
keylime-base-7.3.0-15.el9.aarch64.rpm SHA-256: db9a820df4e11af814ba843fb4f83e477329d1da6dad96f050fbbb31910a6ee8
keylime-registrar-7.3.0-15.el9.aarch64.rpm SHA-256: 6491f3a195a300b776c18b734698d8eaf296603b10b16596ea717a4022747ee3
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.aarch64.rpm SHA-256: a21c097c117c6d321aa33d85daabfa72df413cc86828fa4e2648734a89726779
keylime-verifier-7.3.0-15.el9.aarch64.rpm SHA-256: 4585df722cabff502c7aa6843e8ce7c147dd726de67553387c3e41bdb37290b8
python3-keylime-7.3.0-15.el9.aarch64.rpm SHA-256: fd0c6c544133b74a42fd287ca24dd031713bc1c98554bc57ad95186283272f43

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
aarch64
keylime-7.3.0-15.el9.aarch64.rpm SHA-256: b1dc7c731d80067d70fa4221144115b6ca85ed0bd3de490df7e100747e2a6534
keylime-base-7.3.0-15.el9.aarch64.rpm SHA-256: db9a820df4e11af814ba843fb4f83e477329d1da6dad96f050fbbb31910a6ee8
keylime-registrar-7.3.0-15.el9.aarch64.rpm SHA-256: 6491f3a195a300b776c18b734698d8eaf296603b10b16596ea717a4022747ee3
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.aarch64.rpm SHA-256: a21c097c117c6d321aa33d85daabfa72df413cc86828fa4e2648734a89726779
keylime-verifier-7.3.0-15.el9.aarch64.rpm SHA-256: 4585df722cabff502c7aa6843e8ce7c147dd726de67553387c3e41bdb37290b8
python3-keylime-7.3.0-15.el9.aarch64.rpm SHA-256: fd0c6c544133b74a42fd287ca24dd031713bc1c98554bc57ad95186283272f43

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
ppc64le
keylime-7.3.0-15.el9.ppc64le.rpm SHA-256: 1de2265d3608325642e048305dedf8a2af0ac171fc0d71e8fb9c031861194772
keylime-base-7.3.0-15.el9.ppc64le.rpm SHA-256: a5fb7f4dc79ef21522469698dd6cc04bea9b073b17e2cd20b3d8bec8ef693628
keylime-registrar-7.3.0-15.el9.ppc64le.rpm SHA-256: 6076fde6f5bc65c3aeaf7b7919c7e9d58cda0b2b19a5ab15f89468c8f33a4368
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.ppc64le.rpm SHA-256: f6ab6b12c18d0ab3aabfd2bb004bd30289f03d6e8138c55b8777c1bb4feb959f
keylime-verifier-7.3.0-15.el9.ppc64le.rpm SHA-256: f427ace320b3d67f887a0d8a43af61ea9d9ff8de013558dec1ea66bf7c486d29
python3-keylime-7.3.0-15.el9.ppc64le.rpm SHA-256: 439553c1e5fe8468cbf291d60110a04c7324b0596a0556cfabd344c7c306c2ad

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
x86_64
keylime-7.3.0-15.el9.x86_64.rpm SHA-256: dcbf54895b8c4ecbb6c8c5663cff2503decd8c85fbef88b8d704b943be46eeb1
keylime-base-7.3.0-15.el9.x86_64.rpm SHA-256: 09b7a3e6870b3d41b709bccaf00542cbc30bbf8d5a616e791e81ef08c84171b8
keylime-registrar-7.3.0-15.el9.x86_64.rpm SHA-256: 5384032b0710015af99be10e540577888ecd93b3e24b8ca68e2a12c4cccdbee8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.x86_64.rpm SHA-256: 9cfb467b1acabc5d1bfcb59da397d3e44f34b542ddfb61d6e8e29bcc878c8b40
keylime-verifier-7.3.0-15.el9.x86_64.rpm SHA-256: 4995bf52aef50cdb52020e24f3be36d199b64f31b22ce865f8d7201956f0566c
python3-keylime-7.3.0-15.el9.x86_64.rpm SHA-256: 9bbf13c9332c881dcd09f63c2d485807211cb577d2573187355b5135849c4bf6

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
aarch64
keylime-7.3.0-15.el9.aarch64.rpm SHA-256: b1dc7c731d80067d70fa4221144115b6ca85ed0bd3de490df7e100747e2a6534
keylime-base-7.3.0-15.el9.aarch64.rpm SHA-256: db9a820df4e11af814ba843fb4f83e477329d1da6dad96f050fbbb31910a6ee8
keylime-registrar-7.3.0-15.el9.aarch64.rpm SHA-256: 6491f3a195a300b776c18b734698d8eaf296603b10b16596ea717a4022747ee3
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.aarch64.rpm SHA-256: a21c097c117c6d321aa33d85daabfa72df413cc86828fa4e2648734a89726779
keylime-verifier-7.3.0-15.el9.aarch64.rpm SHA-256: 4585df722cabff502c7aa6843e8ce7c147dd726de67553387c3e41bdb37290b8
python3-keylime-7.3.0-15.el9.aarch64.rpm SHA-256: fd0c6c544133b74a42fd287ca24dd031713bc1c98554bc57ad95186283272f43

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
keylime-7.3.0-15.el9.src.rpm SHA-256: 1899b65bdb7b85d1672c235f3a42b80a862d993cffcd81ae4cad781f25731fde
s390x
keylime-7.3.0-15.el9.s390x.rpm SHA-256: c36d44346b48a3072dab6b928101818edfe81d5912bfed5595b9879adad49659
keylime-base-7.3.0-15.el9.s390x.rpm SHA-256: 5959b43d7d3b10b8cbbf9ebeb6263a417ed6fbdbec3065aad70bd988cdb6f873
keylime-registrar-7.3.0-15.el9.s390x.rpm SHA-256: a4395dda42527a052d8780ed8203d6d756de06edbdfa5be508b129fbbfd1b3a8
keylime-selinux-7.3.0-15.el9.noarch.rpm SHA-256: e782445827864317bd4489989a777931ec8ffdf9276b1db8bcafcde411e2ef00
keylime-tenant-7.3.0-15.el9.s390x.rpm SHA-256: ad255a146eab28c2b5ce781994746c3296c8b81de9a8d85d05cae3ace49afd19
keylime-verifier-7.3.0-15.el9.s390x.rpm SHA-256: cdc67bd19aa3f6d7e52f2a1e12a2837c3a5771d68924311b6f37911f7b6c8dea
python3-keylime-7.3.0-15.el9.s390x.rpm SHA-256: a8b1bc3e3a70c61c601adf4cce02619577c2b972562628457140487a693b14b0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.