CVE-2017-7524: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
CVE-2017-7524: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
Please fix it.
Depends on packages which need a new maintainer
normal
The packages that tpm2-tools depends on which need a new maintainer are:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/t/tpm2-tools.png){kind=link}