From c72ff77ea446efc6217451b888e9537d2c9dcbde Mon Sep 17 00:00:00 2001 From: Stefan Berger Date: Mon, 2 Jun 2025 14:26:03 -0400 Subject: [PATCH] CHANGES: Updated CHANGES document for 0.7.12 Signed-off-by: Stefan Berger --- CHANGES | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CHANGES b/CHANGES index c274598f..57cb15a6 100644 --- a/CHANGES +++ b/CHANGES @@ -1,5 +1,13 @@ CHANGES - changes for libtpms +version 0.7.12: + - tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133) + - tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018) + - tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size 0 (OSSL 3) + - tpm2: Return TPM_RC_VALUE upon decryption failure + - tpm2: Fix the returned number in the JSON + - tpm12: Replace include of engine.h with err.h + version 0.7.11: - tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore - tpm2: Fix a potential overflow expression (coverity)