From 7792fda5b17dbc9b1eb0840118d4a4fcc199b65495c82afc97621e360b00bed0 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 7 Mar 2023 07:54:42 +0000 Subject: [PATCH] * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023) * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022) OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=39 --- libtpms.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libtpms.changes b/libtpms.changes index c1071dc..47df423 100644 --- a/libtpms.changes +++ b/libtpms.changes @@ -2,7 +2,8 @@ Mon Mar 6 16:32:02 UTC 2023 - Alberto Planas Dominguez - Update to 0.9.6: - * tpm2: Check size of buffer before accessing it (CVE-2023-1017 & CVE-2023-1018) + * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023) + * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022) ------------------------------------------------------------------- Sat Dec 3 09:56:13 UTC 2022 - Dirk Müller