Accepting request 1135462 from security

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1135462
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tpm2.0-tools?expand=0&rev=40

tpm2-tools-5.5.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEW0grjj4Z2nyXjh0BbeLpB44fUMEFAmPqU7MACgkQbeLpB44f
-UMEaug//TgtRx9sfZBdtAQpKw/pc3wBBmUfRNC2FF6XYXC63j/iiiDRGyilw/awu
-457DE/bnRpO9LGVRGBh6u34/sJEXXlkAowy4nfCW+PoB4uClC2Cgu9h5znC8t0ZA
-FB5x4hGY3PvbGgaZKqUs3ktGrC74dbXOXaHOee1UnD+PPs9GZqLXoQewY/PhXFLR
-ap2Ny0omW/TUEjksZEaCMvKiCf6F8UPEFoWVf/z+J9O7Qt+SUXb50Oxus6nh1OFL
-ewqJyiFZRwHqFF1BfuTn5nBEt/8bBeW4RVMdc/srSg/Dx0bhZIf7NiUxw/7oD2/x
-wmyJHASBZTN3Af0Ji9D5kyGOeEAfSf+Vwl+UGcAjZ5jJh/le31Cz0d71XSkGEeO2
-Fo0t5ArAhS9mpTeyXOIwiF9SpaBhoEjRwEBxvukfhYalUY16X7McUwxOzPsPZetW
-Iu+s3qhsRgxx3Lw0n3ayK8CV1El8WEyaiOcc7f2TQIm7MeVxo5CQu5oEeUb1I9py
-Pm8MLzm/DUWX0x6ElCeYVUIEpudKxVcM1JA+w+zGmnb1bKnr1IydWneCQmt6L6cq
-uqaON66rNFrFpzNtf2kHqUpkb1DIFHWnIgaqJkP9IayKI17mbvqalaqnOc/1z6/G
-FQ7CNbbIkAdGzHZHVFuWrlJ008kdg01r7AracSoW/oeQsSyWIOs=
-=DW/Z
------END PGP SIGNATURE-----

tpm2-tools-5.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:52c8bcbaadca082abfe5eb7ee4967d2d632d84b1677675f2f071b6d2ec22cec3
+size 1266731

tpm2-tools-5.6.tar.gz.asc

@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=crkh
+-----END PGP SIGNATURE-----

tpm2-tools.keyring

@@ -231,3 +231,107 @@ MVuwsBDdugW1fn7AH1EKXZY2dc7EFSNO+mG4XJqzT+Biq5pumoaT7c/29RqpnM+N
 qvbCulq4dMyalS/ez4xSC00X5wg=
 =kpvR
 -----END PGP PUBLIC KEY BLOCK-----
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=1P9t
+-----END PGP PUBLIC KEY BLOCK-----

tpm2.0-tools.changes

@@ -1,3 +1,69 @@
+-------------------------------------------------------------------
+Thu Dec 21 08:45:24 UTC 2023 - Alberto Planas Dominguez <aplanas@suse.com>
+
+- Update to version 5.6
+  + tpm2_eventlog:
+    * add H-CRTM event support
+    * add support of efivar versions less than 38
+    * Add support to check for efivar/efivar.h manually
+    * Minor formatting fixes
+    * tpm2_eventlog: add support for replay with different
+      StartupLocality
+    * Fix pcr extension for EV_NO_ACTION
+    * Extend test of yaml string representation
+    * Use helper for printing a string dump
+    * Fix upper bound on unique data size
+    * Fix YAML string formatting
+  + tpm2_policy:
+    * Add support for parsing forward seal TPM values
+    * Use forward seal values in creating policies
+    * Move dgst_size in evaluate_populate_pcr_digests()
+    * Allow more than 8 PCRs for sealing
+    * Move dgst_size in evaluate_populate_pcr_digests
+    * Allow more than 8 PCRs for sealing
+    * Make __wrap_Esys_PCR_Read() more dynamic to enable testing more
+      PCRs
+  + tpm2_encryptdecrypt: Fix pkcs7 padding stripping
+  + tpm2_duplicate:
+    * Support -a option for attributes
+    * Add --key-algorithm option
+  + tpm2_encodeobject: Use the correct -O option instead of -C
+  + tpm2_unseal: Add qualifier static to enhance the privacy of unseal
+    function
+  + tpm2_sign:
+    * Remove -m option which was added mistakenly
+    * Revert sm2 sign and verifysignature
+  + tpm2_createek:
+    * Correct man page example
+    * Fix usage of nonce
+    * Fix integrating nonce
+  + tpm2_clear: add more details about the action
+  + tpm2_startauthsession: allow the file attribute for policy
+    authorization.
+  + tpm2_getekcertificate: Add AMD EK support
+  + tpm2_ecdhzgen: Add public-key parameter
+  + tpm2_nvreadpublic: Prevent free of unallocated pointers on failure
+  + Bug-fixes:
+    * The readthedocs build failed with module 'jinja2' has no
+      attribute 'contextfilter' a requirement file was added to fix
+      this problem
+    * An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa
+      implementation. This error can be avoided by switching off the
+      optimization with pragma
+    * Changed wrong function name of "Esys_Load" to "Esys_Load"
+    * Function names beginning with Esys_ are wrongly written as Eys_
+    * Reading and writing a serialized persistent ESYS_TR handles
+    * cirrus-ci update image-family to freebsd-13-2 from 13-1
+  + misc:
+    * Change the default Python version to Python3 in the helper's
+      code
+    * Skip test which uses the sign operator for comparison in
+      abrmd_policynv.sh
+    * tools/tr_encode: Add a tool that can encode serialized ESYS_TR
+      for persistent handles from the TPM2B_PUBLIC and the raw
+      persistent TPM2_HANDLE
+    * Add safe directory in config
+
 -------------------------------------------------------------------
 Wed May 17 14:14:44 UTC 2023 - Alberto Planas Dominguez <aplanas@suse.com>
 

tpm2.0-tools.spec

@@ -29,7 +29,7 @@
 %bcond_with     test
 %endif
 Name:           tpm2.0-tools
-Version:        5.5
+Version:        5.6
 Release:        0
 Summary:        Trusted Platform Module (TPM) 2.0 administration tools
 License:        BSD-3-Clause
@@ -38,6 +38,7 @@ URL:            https://github.com/tpm2-software/tpm2-tools/releases
 Source0:        https://github.com/tpm2-software/tpm2-tools/releases/download/%{version}/tpm2-tools-%{version}.tar.gz
 Source1:        https://github.com/tpm2-software/tpm2-tools/releases/download/%{version}/tpm2-tools-%{version}.tar.gz.asc
 # git show william-roberts-pub javier-martinez-pub joshua-lock-pub idesai-pub > tpm2-tools.keyring
+# The key can be accessed by "curl https://github.com/UNAME.gpg"
 Source2:        tpm2-tools.keyring
 BuildRequires:  gcc-c++
 BuildRequires:  libcurl-devel