SUSE-SU-2026:24114-1: moderate: Security update for swtpm

[SLE-SECURITY-UPDATES]

# Security update for swtpm

Announcement ID: SUSE-SU-2026:24114-1  
Release Date: 2026-10-07T09:31:01Z  
Rating: moderate  
References:

  * bsc#1221342
  * bsc#1251789
  * bsc#1266339
  * bsc#1271417
  * bsc#1275653

  
Cross-References:

  * CVE-2026-75900

  
CVSS scores:

  * CVE-2026-75900 ( SUSE ):  6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  * CVE-2026-75900 ( NVD ):  6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

  
Affected Products:

  * SUSE Linux Micro 6.2

  
  
An update that solves one vulnerability and has four fixes can now be installed.

## Description:

This update for swtpm fixes the following issues:

Security issue fixed:

  * CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to
    sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).

Changes for swtpm:

Update to 0.10.2:

  * Properly check for truncation following snprintf call
  * add upstream signing key and validate source signature
  * Fix SELinux policy for virtqemud_t swtpm_t setsched process and unix socket
    interactions. Allows virtqemud_t to: Signal and control swtpm_t processes
    (noatsecure, rlimitinh, siginh, signull, setsched), create and listen on
    Unix stream sockets with swtpm_t processes (bsc#1266339). Already accepted
    on upstream: https://github.com/stefanberger/swtpm/pull/1132
  * Drop tunable in require to avoid policy loading issues with toolchain 3.11
    (bsc#1271417). Can be dropped, once this is accepted upstream:
    https://github.com/stefanberger/swtpm/pull/1139
  * Update SELinux module dir as macro to allow root path move from
    /var/lib/selinux to /etc/selinux (bsc#1221342)
  * Also load swtpm_libvirt in the selinux subpackage (bsc#1251789)
  * Update to version 0.10.1:
  * swtpm: Fix build error on 32bit systems due to inconsistent
    _FILE_OFFSET_BITS.
  * swtpm_setup:
  * Use DISTRO_PROFILES_DIR when listing profiles (fix path issue).
  * Do not pass a TPM 2 profile to swtpm when reconfiguring.
  * selinux:
  * Add rule for swtpm to be able to read password from pipe.
  * allow to map state file.
  * add NFS permissions for swtpm_t.
  * Add rule to allow swtpm_t opening of virt_log_t files.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro 6.2  
    zypper in -t patch SUSE-SL-Micro-6.2-1861

## Package List:

  * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64)
    * swtpm-debuginfo-0.10.2-160000.1.1
    * swtpm-0.10.2-160000.1.1
    * swtpm-debugsource-0.10.2-160000.1.1
  * SUSE Linux Micro 6.2 (noarch)
    * swtpm-selinux-0.10.2-160000.1.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-75900.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1221342
  * https://bugzilla.suse.com/show_bug.cgi?id=1251789
  * https://bugzilla.suse.com/show_bug.cgi?id=1266339
  * https://bugzilla.suse.com/show_bug.cgi?id=1271417
  * https://bugzilla.suse.com/show_bug.cgi?id=1275653

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261009/d2253b45/attachment.htm>