Accepting request 1301063 from security

- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248486). (forwarded request 1300952 from gleidi)

OBS-URL: https://build.opensuse.org/request/show/1301063
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libtpms?expand=0&rev=23

libtpms-0.10.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ebc24f3191d90f6cf0b4d4200cd876db4bd224b3c565708bbea0a82ee275e0fb
+size 1399253

libtpms.changes

@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Fri Aug 22 09:17:44 UTC 2025 - Giacomo Leidi <giacomo.leidi@suse.com>
+
+- Allow for %is_opensuse to be unset, following up to
+  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248486).
+
+-------------------------------------------------------------------
+Mon Jun 16 08:43:56 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Update to version 0.10.1:
+  * tpm2: Fix potential out-of-bound access & abort due to HMAC
+    signing issue (CVE-2025-49133).
+  * tpm2: fix build for LibreSSL 4.1.0.
+  * tpm2: In CheckLockedOut replace TPM_RC_RETRY with
+    TPM_RC_SUCCESS.
+  * tpm2: Fix bugs in RuntimeProfileDedupStrItems.
+  * tpm2 + test: Make it compilable on Debian GNU Hurd.
+  * tpm2: Add asserts to silence compiler warning due to
+    -Wstringop-overflow=.
+  * tpm2: Add padding to OBJECT for 32bit targets.
+- Drop tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch: fixed
+  upstream.
+
 -------------------------------------------------------------------
 Fri Dec  6 09:03:46 UTC 2024 - Manfred Hollstein <manfred.h@gmx.net>
 

libtpms.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libtpms
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,19 +18,17 @@
 
 %define lname libtpms0
 Name:           libtpms
-Version:        0.10.0
+Version:        0.10.1
 Release:        0
 Summary:        Library providing Trusted Platform Module (TPM) functionality
 License:        BSD-3-Clause
 Group:          Development/Libraries/C and C++
 URL:            https://github.com/stefanberger/libtpms
 Source0:        %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
-# PATCH-FIX-UPSTREAM tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch gh#stefanberger/libtpms#476
-Patch0:         tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  fdupes
-%if 0%{is_opensuse} && 0%{?suse_version} < 1599
+%if 0%{?is_opensuse} && 0%{?suse_version} < 1599
 BuildRequires:  gcc13-c++
 %else
 BuildRequires:  gcc-c++

tpm2-Add-padding-to-OBJECT-for-32bit-targets.patch

@@ -1,27 +0,0 @@
-From 806141196296150c03e5d826ab7e6c3602f41b98 Mon Sep 17 00:00:00 2001
-From: Stefan Berger <stefanb@linux.ibm.com>
-Date: Fri, 15 Nov 2024 08:07:23 -0500
-Subject: [PATCH] tpm2: Add padding to OBJECT for 32bit targets
-
-The nvram_offsets test fails on 32bit targets due to an unexpected size
-of an OBJECT. This was due to missing padding.
-
-Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
----
- src/tpm2/Global.h | 3 +++
- 1 file changed, 3 insertions(+)
-
-diff --git a/src/tpm2/Global.h b/src/tpm2/Global.h
-index 910b940e3..c4d7176f3 100644
---- a/src/tpm2/Global.h
-+++ b/src/tpm2/Global.h
-@@ -265,6 +265,9 @@ typedef struct OBJECT
-     // this field carries additional metadata
-     // needed to derive the proof value for
-     // the object.
-+#if __LONG_WIDTH__ == 32
-+    UINT8               _pad1[4]; /* 32 bit targets need padding */
-+#endif
- 
-     // libtpms added: SEED_COMPAT_LEVEL to use for deriving child keys
-     SEED_COMPAT_LEVEL   seedCompatLevel;