3039b9d8a0
Accepting request 1301063 from security
...
- Allow for %is_opensuse to be unset, following up to
https://src.suse.de/products/SLFO/pulls/204 (bsc#1248486). (forwarded request 1300952 from gleidi)
OBS-URL: https://build.opensuse.org/request/show/1301063
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=23
2025-08-25 18:36:30 +00:00
5215d7e8c8
Accepting request 1300952 from home:gleidi:branches:security
...
- Allow for %is_opensuse to be unset, following up to
https://src.suse.de/products/SLFO/pulls/204 (bsc#1248486).
OBS-URL: https://build.opensuse.org/request/show/1300952
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=51
2025-08-23 10:26:21 +00:00
7100badae6
Accepting request 1287565 from security
...
OBS-URL: https://build.opensuse.org/request/show/1287565
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=22
2025-06-23 12:50:32 +00:00
77f2dc5ec7
Accepting request 1286031 from home:dimstar:Factory
...
- Update to version 0.10.1:
* tpm2: Fix potential out-of-bound access & abort due to HMAC
signing issue (CVE-2025-49133).
* tpm2: fix build for LibreSSL 4.1.0.
* tpm2: In CheckLockedOut replace TPM_RC_RETRY with
TPM_RC_SUCCESS.
* tpm2: Fix bugs in RuntimeProfileDedupStrItems.
* tpm2 + test: Make it compilable on Debian GNU Hurd.
* tpm2: Add asserts to silence compiler warning due to
-Wstringop-overflow=.
* tpm2: Add padding to OBJECT for 32bit targets.
- Drop tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch: fixed
upstream.
OBS-URL: https://build.opensuse.org/request/show/1286031
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=49
2025-06-21 13:40:09 +00:00
a9580f378a
Accepting request 1228778 from security
...
- Use gcc/g++-13 on Leap to fix the following failure:
"tpm2_setprofile.c:49:24: error: initializer element is not constant" (forwarded request 1228719 from manfred-h)
OBS-URL: https://build.opensuse.org/request/show/1228778
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=21
2024-12-08 10:36:31 +00:00
e3b88f9aad
Accepting request 1228719 from home:manfred-h:branches:security
...
- Use gcc/g++-13 on Leap to fix the following failure:
"tpm2_setprofile.c:49:24: error: initializer element is not constant"
OBS-URL: https://build.opensuse.org/request/show/1228719
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=47
2024-12-06 13:06:07 +00:00
89d23c205d
Accepting request 1228303 from security
...
- Add tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch
- Update to 0.10.0:
* tpm2: Support for profiles: default-v1 & custom
* tpm2: Add new API call TPMLIB_SetProfile to enable user to set a
profile
* tpm2: Extende TPMLIB_GetInfo to return profiles-related info
* tpm2: Implemented crypto tests and restrictions on crypto related
to FIPS-140-3; can be enabled with profiles
* tpm2: Enable Camellia-192 and AES-192
* tpm2: Implement TPMLIB_WasManufactured API call
* tpm2: Fixes for issues detected by static analyzers
* tpm2: Use OpenSSL-based KDFe implementation if possible
* tpm2: Update to TPM 2 spec rev 183 (many changes)
* tpm2: Better support for OpenSSL 3.x
* tpm2: Use Carmichael function for RSA priv. exponent D (>= 2048
bits)
* tpm2: Fixes for CVE-2023-1017 and CVE-2023-1018
* tpm2: Fix of SignedCompareB().
- NOTE: This fix may result in backwards compatibility issues with PCR
policies used by TPM2_PolicyCounterTimer and TPM2_PolicyNV when
upgrading from v0.9 to v0.10. (forwarded request 1228299 from aplanas)
OBS-URL: https://build.opensuse.org/request/show/1228303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=20
2024-12-05 16:05:18 +00:00
aa522252e3
Accepting request 1228299 from home:aplanas:branches:security
...
- Add tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch
- Update to 0.10.0:
* tpm2: Support for profiles: default-v1 & custom
* tpm2: Add new API call TPMLIB_SetProfile to enable user to set a
profile
* tpm2: Extende TPMLIB_GetInfo to return profiles-related info
* tpm2: Implemented crypto tests and restrictions on crypto related
to FIPS-140-3; can be enabled with profiles
* tpm2: Enable Camellia-192 and AES-192
* tpm2: Implement TPMLIB_WasManufactured API call
* tpm2: Fixes for issues detected by static analyzers
* tpm2: Use OpenSSL-based KDFe implementation if possible
* tpm2: Update to TPM 2 spec rev 183 (many changes)
* tpm2: Better support for OpenSSL 3.x
* tpm2: Use Carmichael function for RSA priv. exponent D (>= 2048
bits)
* tpm2: Fixes for CVE-2023-1017 and CVE-2023-1018
* tpm2: Fix of SignedCompareB().
- NOTE: This fix may result in backwards compatibility issues with PCR
policies used by TPM2_PolicyCounterTimer and TPM2_PolicyNV when
upgrading from v0.9 to v0.10.
OBS-URL: https://build.opensuse.org/request/show/1228299
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=45
2024-12-04 12:48:14 +00:00
2623d574c7
revert
...
0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=44
2024-01-09 07:34:45 +00:00
a4a991ee5b
Accepting request 1137544 from home:msmeissn:branches:security
...
removed 0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
removed 0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
removed 0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
OBS-URL: https://build.opensuse.org/request/show/1137544
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=43
2024-01-08 11:59:47 +00:00
bf55b82316
Accepting request 1135332 from security
...
- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch: upstreamed
- Used in SLE:
0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch (forwarded request 1134474 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/1135332
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=19
2024-01-03 11:27:23 +00:00
8289278e8a
Accepting request 1134474 from home:msmeissn:branches:security
...
- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch: upstreamed
- Used in SLE:
0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
OBS-URL: https://build.opensuse.org/request/show/1134474
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=41
2023-12-27 15:05:42 +00:00
bda0abe0cd
Accepting request 1069859 from security
...
- Update to 0.9.6:
* CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
* CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)
OBS-URL: https://build.opensuse.org/request/show/1069859
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=18
2023-03-08 13:51:27 +00:00
eb079e4169
* CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
...
* CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=39
2023-03-07 07:54:42 +00:00
43b8a52a33
Accepting request 1069708 from home:aplanas:branches:security
...
- Update to 0.9.6:
* tpm2: Check size of buffer before accessing it (CVE-2023-1017 & CVE-2023-1018)
OBS-URL: https://build.opensuse.org/request/show/1069708
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=38
2023-03-07 07:49:19 +00:00
bb5c35afdf
Accepting request 1040190 from security
...
- update to 0.9.5:
* tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
* tpm2: Fix a potential overflow expression (coverity)
* tpm2: Fix size check in CryptSecretDecrypt
* tpm: #undef printf in case it is #define'd (OSS-Fuzz)
* tpm2: Check return code of BN_div()
* tpm2: Initialize variables due to gcc complaint (s390x, false positive)
* tpm12: Initialize variables due to gcc complaint (s390x, false positive)
* build-sys: Fix configure script to support _FORTIFY_SOURCE=3 (forwarded request 1039771 from dirkmueller)
OBS-URL: https://build.opensuse.org/request/show/1040190
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=17
2022-12-07 16:33:34 +00:00
32c7066ed4
Accepting request 1039771 from home:dirkmueller:Factory
...
- update to 0.9.5:
* tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
* tpm2: Fix a potential overflow expression (coverity)
* tpm2: Fix size check in CryptSecretDecrypt
* tpm: #undef printf in case it is #define'd (OSS-Fuzz)
* tpm2: Check return code of BN_div()
* tpm2: Initialize variables due to gcc complaint (s390x, false positive)
* tpm12: Initialize variables due to gcc complaint (s390x, false positive)
* build-sys: Fix configure script to support _FORTIFY_SOURCE=3
OBS-URL: https://build.opensuse.org/request/show/1039771
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=36
2022-12-05 09:26:56 +00:00
74d7bd334b
Accepting request 1038201 from security
...
- fix build for ppc64le: use -Wl,--no-as-needed in check-local
[bsc#1204556] (forwarded request 1038171 from pgajdos)
OBS-URL: https://build.opensuse.org/request/show/1038201
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=16
2022-11-26 17:45:09 +00:00
2d0fd71aea
Accepting request 1038171 from home:pgajdos
...
- fix build for ppc64le: use -Wl,--no-as-needed in check-local
[bsc#1204556]
OBS-URL: https://build.opensuse.org/request/show/1038171
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=34
2022-11-25 12:36:24 +00:00
e5c902be34
Accepting request 1031153 from security
...
- Fixed CVE-2021-3623 (bsc#1187767) (forwarded request 1030434 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/1031153
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=15
2022-10-26 10:31:31 +00:00
6a386e4749
Accepting request 1030434 from home:msmeissn:branches:security
...
- Fixed CVE-2021-3623 (bsc#1187767)
OBS-URL: https://build.opensuse.org/request/show/1030434
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=32
2022-10-25 13:45:00 +00:00
6eb5586c57
Accepting request 968367 from security
...
- update to 0.9.3:
* build-sys: Add probing for -fstack-protector
* tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
* (OSSL 3)
* tpm2: When writing state initialize s_ContextSlotMask if not set (forwarded request 968240 from dirkmueller)
OBS-URL: https://build.opensuse.org/request/show/968367
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=14
2022-04-13 19:03:59 +00:00
1f1fb3d247
Accepting request 968240 from home:dirkmueller:Factory
...
- update to 0.9.3:
* build-sys: Add probing for -fstack-protector
* tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
* (OSSL 3)
* tpm2: When writing state initialize s_ContextSlotMask if not set
OBS-URL: https://build.opensuse.org/request/show/968240
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=30
2022-04-11 07:24:27 +00:00
f76ab73985
Accepting request 939041 from security
...
OBS-URL: https://build.opensuse.org/request/show/939041
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=13
2021-12-12 20:27:10 +00:00
d58ab12e04
Accepting request 938273 from home:susnux:branches:security
...
Update to version 0.9.1
OBS-URL: https://build.opensuse.org/request/show/938273
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=29
2021-12-10 09:13:17 +00:00
6244305009
Accepting request 917964 from security
...
OBS-URL: https://build.opensuse.org/request/show/917964
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=12
2021-09-13 14:24:29 +00:00
f47a4587dd
Accepting request 915306 from home:pgajdos
...
- security update
- added patches
fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
+ libtpms-CVE-2021-3746.patch
OBS-URL: https://build.opensuse.org/request/show/915306
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=28
2021-09-10 13:22:37 +00:00
Richard Brown
a55ab58d1b
Accepting request 910800 from security
...
OBS-URL: https://build.opensuse.org/request/show/910800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=11
2021-08-12 07:01:02 +00:00
d71da595c0
Accepting request 910606 from home:gmbr3:Active
...
- Update to version 0.8.4:
* Reset too large size indicators in TPM2B to avoid access
beyond buffer
* Restore original value in buffer if unmarshalled one was
illegal
OBS-URL: https://build.opensuse.org/request/show/910606
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=27
2021-08-09 08:47:20 +00:00
152cba253c
Accepting request 886707 from security
...
- Update to version 0.8.2
* tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
not use (bsc#1184939 CVE-2021-3505)
* tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
(bsc#1184939 CVE-2021-3505) (forwarded request 886589 from gary_lin)
OBS-URL: https://build.opensuse.org/request/show/886707
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=10
2021-04-23 15:49:36 +00:00
b652959fa5
Accepting request 886589 from home:gary_lin:branches:security
...
- Update to version 0.8.2
* tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
not use (bsc#1184939 CVE-2021-3505)
* tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
(bsc#1184939 CVE-2021-3505)
OBS-URL: https://build.opensuse.org/request/show/886589
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=25
2021-04-19 14:15:21 +00:00
74ca36c4dc
Accepting request 880046 from security
...
- Update to version 0.7.7
* CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
* tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
* tpm2: Address some Coverity issues (false positives)
* tpm1.2: Backported ASAN/UBSAN related fixes
* tpm2: Return properly sized array for b parameter for NIST P521
(HLK)
* tpm2: Addressed issues detected by UBSAN
* tpm2: Addressed issues detected by cppcheck (false positives) (forwarded request 880005 from gary_lin)
OBS-URL: https://build.opensuse.org/request/show/880046
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=9
2021-03-24 15:09:49 +00:00
8287c41c07
Accepting request 880005 from home:gary_lin:branches:security
...
- Update to version 0.7.7
* CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
* tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
* tpm2: Address some Coverity issues (false positives)
* tpm1.2: Backported ASAN/UBSAN related fixes
* tpm2: Return properly sized array for b parameter for NIST P521
(HLK)
* tpm2: Addressed issues detected by UBSAN
* tpm2: Addressed issues detected by cppcheck (false positives)
OBS-URL: https://build.opensuse.org/request/show/880005
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=23
2021-03-19 07:40:53 +00:00
2bbc3b0f06
Accepting request 850101 from security
...
- Update to version 0.7.4
* Addressed potential constant-time related issues in TPM 1.2 and
TPM 2 code
TPM 1.2: RSA decryption
TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
* Fixed some compilation issues (forwarded request 850056 from gary_lin)
OBS-URL: https://build.opensuse.org/request/show/850101
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=8
2020-11-23 14:48:57 +00:00
e905569922
Accepting request 850056 from home:gary_lin:branches:security
...
- Update to version 0.7.4
* Addressed potential constant-time related issues in TPM 1.2 and
TPM 2 code
TPM 1.2: RSA decryption
TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
* Fixed some compilation issues
OBS-URL: https://build.opensuse.org/request/show/850056
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=21
2020-11-23 08:03:48 +00:00
2dff1d1fe4
Accepting request 822328 from security
...
Update to version 0.7.3. Other minor changes to the spec file were done automatically by the format spec service. (forwarded request 822315 from kailiu)
OBS-URL: https://build.opensuse.org/request/show/822328
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=7
2020-07-24 08:05:23 +00:00
ed2c4a1895
Accepting request 822315 from home:kailiu:branches:security
...
Update to version 0.7.3. Other minor changes to the spec file were done automatically by the format spec service.
OBS-URL: https://build.opensuse.org/request/show/822315
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=19
2020-07-23 08:15:48 +00:00
5d8d341604
Accepting request 729455 from security
...
OBS-URL: https://build.opensuse.org/request/show/729455
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=6
2019-09-09 21:58:15 +00:00
04f657f689
Accepting request 728463 from home:gary_lin:branches:security
...
Update to version 0.7.0
OBS-URL: https://build.opensuse.org/request/show/728463
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=17
2019-09-09 12:39:29 +00:00
c01fca0a5a
Accepting request 674674 from security
...
OBS-URL: https://build.opensuse.org/request/show/674674
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=5
2019-02-27 16:27:50 +00:00
3f538c2dfa
Accepting request 669009 from home:gary_lin:branches:security
...
Update to version 0.6.0 and enable TPM2 support
OBS-URL: https://build.opensuse.org/request/show/669009
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=15
2019-02-13 17:01:49 +00:00
ed9061e76f
Accepting request 568220 from security
...
OBS-URL: https://build.opensuse.org/request/show/568220
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=4
2018-01-24 14:29:18 +00:00
f58a669183
Accepting request 566607 from home:vitezslav_cizek:branches:security
...
- Update to version 0.6.0-dev1
* no upstream changelog
* fix build with openssl 1.1 (bsc#1074801)
- fix rpm group
OBS-URL: https://build.opensuse.org/request/show/566607
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=13
2018-01-22 16:25:33 +00:00
4788412431
Accepting request 292213 from security
...
- Update to version 0.5.2
* No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
comes from git and configure script has to be generated
OBS-URL: https://build.opensuse.org/request/show/292213
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=3
2015-03-23 11:18:58 +00:00
1b3a2258cf
Accepting request 292200 from home:posophe:branches:security
...
update
OBS-URL: https://build.opensuse.org/request/show/292200
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=11
2015-03-21 12:07:02 +00:00
Stephan Kulow
e551e2047e
Accepting request 214259 from security
...
add for factory
OBS-URL: https://build.opensuse.org/request/show/214259
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=1
2014-01-22 22:19:36 +00:00
8826eced37
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=9
2014-01-17 15:09:10 +00:00
c5f7a09275
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=8
2014-01-15 10:11:13 +00:00
82b5d35b41
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=7
2014-01-15 10:02:46 +00:00
69a20bc97d
OBS-URL: https://build.opensuse.org/package/show/security/libtpms?expand=0&rev=6
2014-01-15 09:46:21 +00:00