Security Advisory - GHSA-g85c-rh49-p8cq - mxs-dcp/dcp_tool

62 views

Skip to first unread message

Andrea Barisani

unread,

Jun 27, 2024, 6:07:02 AM6/27/24

to USB armory

Hello,

The previous USB armory Debian base image release 20240404 includes the `dcp_tool` binary which is affected by the following advisory:

https://github.com/usbarmory/mxs-dcp/security/advisories/GHSA-g85c-rh49-p8cq

Users of `dcp_tool` on secure booted units should be aware that the test key was always used on such release.

A new Debian base image release will be released in the upcoming days to include an updated binary, users of `dcp_tool` under secure booted in the meantime should manually update the binary.

Kind regards

Andrea Barisani

unread,

Jul 2, 2024, 10:03:10 AM7/2/24

to USB armory

The `dcp_tool` binary was actually not included in the Debian base image release.

Therefore, unlike my earlier statement, the advisory does *not* apply as only the kernel module was present.