forked from pool/tpm2.0-tools
Matthias Gerstner
30fe5afe17
- update to version 5.1.1:
- tpm2_import: fix fixed AES key CVE-2021-3565
- tpm2_import used a fixed AES key for the inner wrapper, which means that
a MITM attack would be able to unwrap the imported key. To fix this,
ensure the key size is 16 bytes or bigger and use OpenSSL to generate a
secure random AES key.
- Avoid pandoc build dependency, use prebuilt man pages everywhere
- Drop 0001-tpm2_import-fix-fixed-AES-key-CVE-2021-3565.patch, now upstream
- Drop _service, unused
- Drop unused unzip build dependency
- Drop autoreconfigure call, no longer necessary
- Use %autosetup
- Verify tarball signature
- Build against efivar
- Drop %check section, tests weren't built, so that was a noop
OBS-URL: https://build.opensuse.org/request/show/902778
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=80
|
||
|---|---|---|
| .gitattributes | ||
| .gitignore | ||
| 0001-tpm2_checkquote-fix-uninitialized-variable.patch | ||
| 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch | ||
| fix_bogus_warning.patch | ||
| tpm2-tools-5.1.1.tar.gz | ||
| tpm2-tools-5.1.1.tar.gz.asc | ||
| tpm2-tools.keyring | ||
| tpm2.0-tools.changes | ||
| tpm2.0-tools.spec | ||