Adding patchinfo patchinfo.20260330191719910439.925254595339

2026-04-08 16:12:12 +02:00
parent 10bd33fe1d
commit e48dce39f2
3 changed files with 18 additions and 2 deletions
@@ -7286,7 +7286,8 @@
 	url = ../../pool/swtpm
 [submodule "libtpms"]
 	path = libtpms
-	url = ../../pool/libtpms
+	url = ../../ALP-pool/libtpms
+	branch = main
 [submodule "pinentry"]
 	path = pinentry
 	url = ../../ALP-pool/pinentry
@@ -0,0 +1,15 @@
+<patchinfo>
+  <!-- generated from request(s) 404721 -->
+  <issue tracker="bnc" id="1244528">VUL-0: CVE-2025-49133: libtpms: potential out of bounds (OOB) read vulnerability</issue>
+  <issue tracker="cve" id="2025-49133"/>
+  <packager>msmeissn</packager>
+  <rating>moderate</rating>
+  <category>security</category>
+  <summary>Security update for libtpms</summary>
+  <description>This update for libtpms fixes the following issues:
+
+- CVE-2025-49133: out-of-bounds (OOB) access due to HMAC signing issue leads to abort and vTPM DoS (bsc#1244528).
+</description>
+  <package>libtpms</package>
+  <seperate_build_arch/>
+</patchinfo>