SLFO-pool/libtpms
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync from SUSE:SLFO:Main libtpms revision 4039469a4134c42f5e999d29f497c743

Browse Source
This commit is contained in:
Adrian Schröter 2024-05-03 15:58:45 +02:00
commit 4fbea9fe35
4 changed files with 311 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

BIN
libtpms-0.9.6.tar.gz (Stored with Git LFS) Normal file
View File

Binary file not shown.

189
libtpms.changes Normal file
View File

@ -0,0 +1,189 @@
-------------------------------------------------------------------
Mon Mar 6 16:32:02 UTC 2023 - Alberto Planas Dominguez <aplanas@suse.com>
- Update to 0.9.6:
* CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
* CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)
-------------------------------------------------------------------
Sat Dec 3 09:56:13 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.9.5:
* tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
* tpm2: Fix a potential overflow expression (coverity)
* tpm2: Fix size check in CryptSecretDecrypt
* tpm: #undef printf in case it is #define'd (OSS-Fuzz)
* tpm2: Check return code of BN_div()
* tpm2: Initialize variables due to gcc complaint (s390x, false positive)
* tpm12: Initialize variables due to gcc complaint (s390x, false positive)
* build-sys: Fix configure script to support _FORTIFY_SOURCE=3
-------------------------------------------------------------------
Fri Nov 25 10:04:05 UTC 2022 - pgajdos@suse.com
- fix build for ppc64le: use -Wl,--no-as-needed in check-local
[bsc#1204556]
-------------------------------------------------------------------
Sun Apr 10 12:43:58 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.9.3:
* build-sys: Add probing for -fstack-protector
* tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
* (OSSL 3)
* tpm2: When writing state initialize s_ContextSlotMask if not set
-------------------------------------------------------------------
Thu Dec 9 19:57:51 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 0.9.1
* Downgrade to previous versions is not possible, as the size of
the context gap has been adjusted to 0xffff from 0xff.
* Enabled Camellia symmetric key encryption algorithm
* tpm2: Update to TPM 2 spec rev 164
* tpm2: Added a cache for private exponent D and prime Q
* tpm2: bug fixes
- Drop upstream fixed libtpms-CVE-2021-3746.patch
- Fixed CVE-2021-3623 (bsc#1187767)
-------------------------------------------------------------------
Tue Aug 31 16:36:31 UTC 2021 - pgajdos@suse.com
- security update
- added patches
fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
+ libtpms-CVE-2021-3746.patch
-------------------------------------------------------------------
Sat Aug 7 15:00:32 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
- Update to version 0.8.4:
* Reset too large size indicators in TPM2B to avoid access
beyond buffer
* Restore original value in buffer if unmarshalled one was
illegal
-------------------------------------------------------------------
Mon Apr 19 07:18:37 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com>
- Update to version 0.8.2
* NOTE: Downgrade to 0.7.x or below is not possible.
Due to fixes in the TPM 2 prime number generation code in
rev155 it is not possible to downgrade from libtpms version
0.8.0 to some previous version. The seeds are now associated
with an age so that older seeds use the old TPM 2 prime number
generation code while newer seed use the newer code.
* tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
not use (bsc#1184939 CVE-2021-3505)
* tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
(bsc#1184939 CVE-2021-3505)
* Update to TPM 2 code release 159
- X509 support is enabled
+ SM2 signing of ceritificates is NOT supported
- Authenticated timers are disabled
* Update to TPM 2 code relase 162
- ECC encryption / decryption is disabled
* Fix support for elliptic curve due to missing unmarshalling
code
* Runtime filter supported elliptic curves supported by OpenSSL
* Fix output buffer parameter and size for RSA decryption that
could cause stack corruption under certain circumstances
* Set the RSA PSS salt length to the digest length rather than
max
* Fixes to symmetric decryption related to input size check,
defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
and to always use a temporary malloc'ed buffer for decryption
* Fixed the set of PCRs belonging to the TCB group. This affects
the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
latest swtpm for test cases to succeed there.
-------------------------------------------------------------------
Fri Mar 19 02:03:20 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com>
- Update to version 0.7.7
* CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
* tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
* tpm2: Address some Coverity issues (false positives)
* tpm1.2: Backported ASAN/UBSAN related fixes
* tpm2: Return properly sized array for b parameter for NIST P521
(HLK)
* tpm2: Addressed issues detected by UBSAN
* tpm2: Addressed issues detected by cppcheck (false positives)
-------------------------------------------------------------------
Mon Nov 23 03:31:28 UTC 2020 - Gary Ching-Pang Lin <glin@suse.com>
- Update to version 0.7.4
* Addressed potential constant-time related issues in TPM 1.2 and
TPM 2 code
TPM 1.2: RSA decryption
TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
* Fixed some compilation issues
-------------------------------------------------------------------
Thu Jul 23 05:01:12 UTC 2020 - Kai Liu <kai.liu@suse.com>
- Update to version 0.7.3
* Fixed the set of PCRs belonging to the TCB group. This affects
the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
latest `swtpm` (master, stable branches) for test cases to
succeed there.
- Changes since version 0.7.2
* Fix output buffer parameter and size for RSA decryption that
could cause stack corruption under certain circumstances
* Set the RSA PSS salt length to the digest length rathern than
max. possible
* Fixes to symmetric decrytion related to input size check, defer
padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
* tpm2: Fix TDES key creation by adding missing un-/marshalling
functions
* tpm2: Fix a bug in CheckAuthSession
* compilation fixes for TPM 1.2 & TPM 2 and various architectures
and gcc versions
* Fix support for NIST curves P{192,224,521} and SM2 P256 and
BNP648 that would not work;
* Runtime filter elliptic curves (that OpenSSL does not support)
and do not advertise those curves as capabilities
* Removed unnecessary space in MANUFACTURER "IBM " -> "IBM"
-------------------------------------------------------------------
Thu Sep 5 08:21:34 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- Update to version 0.7.0
* fixes for TPM2
- Add gcc-c++ to BuildRequires
-------------------------------------------------------------------
Mon Jan 28 09:25:27 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- Update to version 0.6.0
* Introduce TPM2 support
- Use %license tag for LICENSE
-------------------------------------------------------------------
Wed Jan 17 12:05:51 UTC 2018 - vcizek@suse.com
- Update to version 0.6.0-dev1
* no upstream changelog
* fix build with openssl 1.1 (bsc#1074801)
- fix rpm group
-------------------------------------------------------------------
Sat Mar 21 11:50:03 UTC 2015 - p.drouand@gmail.com
- Update to version 0.5.2
* No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
comes from git and configure script has to be generated
-------------------------------------------------------------------
Tue Jan 14 14:51:14 UTC 2014 - meissner@suse.com
- import 0.5.1
- software TPM driver library for hooking into QEMU

96
libtpms.spec Normal file
View File

@ -0,0 +1,96 @@
#
# spec file for package libtpms
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define lname libtpms0
Name: libtpms
Version: 0.9.6
Release: 0
Summary: Library providing Trusted Platform Module (TPM) functionality
License: BSD-3-Clause
Group: Development/Libraries/C and C++
URL: https://github.com/stefanberger/libtpms
Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: fdupes
BuildRequires: gcc-c++
BuildRequires: libtool
BuildRequires: mozilla-nspr-devel
BuildRequires: openssl-devel
BuildRequires: pkgconfig
%description
A library providing TPM functionality for VMs. Targeted for integration
into Qemu.
%package -n %{lname}
Summary: Library providing Trusted Platform Module (TPM) functionality
Group: Development/Libraries/C and C++
%description -n %{lname}
A library providing TPM functionality for VMs. Targeted for integration
into Qemu.
%package devel
Summary: Include files for libtpms
Group: Development/Libraries/C and C++
Requires: %{lname} = %{version}
Requires: libopenssl-devel
Requires: mozilla-nspr-devel
%description devel
Libtpms header files and documentation.
%prep
%autosetup -p1
%build
autoreconf -fiv
%configure \
--with-tpm2 \
--with-openssl \
--disable-static
%make_build
%install
%make_install
find %{buildroot} -type f -name "*.la" -delete -print
%fdupes -s %{buildroot}
%check
# fix check-local
# https://bugzilla.suse.com/show_bug.cgi?id=1204556#c9
sed -i "s@\(-L\./\.libs\)@\1 -Wl,--no-as-needed@" src/Makefile
%make_build check
%post -n %{lname} -p /sbin/ldconfig
%postun -n %{lname} -p /sbin/ldconfig
%files -n %{lname}
%doc README CHANGES
%license LICENSE
%{_libdir}/%{name}.so.*
%files devel
%{_libdir}/%{name}.so
%{_includedir}/%{name}
%{_libdir}/pkgconfig/*.pc
%{_mandir}/man3/*%{?ext_man}
%changelog