Proxmox-Port/libtpms
1
0
Fork 0
mirror of https://github.com/stefanberger/libtpms synced 2026-08-08 21:58:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

CHANGES: Updated CHANGES document for 0.7.12

Browse Source 
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
Stefan Berger 2025-06-02 14:26:03 -04:00 committed by Stefan Berger
parent 4630edaeb4
commit c72ff77ea4
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
CHANGES
View File

@ -1,5 +1,13 @@
CHANGES - changes for libtpms
version 0.7.12:
- tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133)
- tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018)
- tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size 0 (OSSL 3)
- tpm2: Return TPM_RC_VALUE upon decryption failure
- tpm2: Fix the returned number in the JSON
- tpm12: Replace include of engine.h with err.h
version 0.7.11:
- tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
- tpm2: Fix a potential overflow expression (coverity)