revert
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch

• Files Changed
• Browse Source

  removed 0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  removed 0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  removed 0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch: upstreamed
- Used in SLE:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

  * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
  * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)

• Files Changed
• Browse Source

- Update to 0.9.6:
  * tpm2: Check size of buffer before accessing it (CVE-2023-1017 & CVE-2023-1018)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 0.9.5:
  * tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
  * tpm2: Fix a potential overflow expression (coverity)
  * tpm2: Fix size check in CryptSecretDecrypt
  * tpm: #undef printf in case it is #define'd (OSS-Fuzz)
  * tpm2: Check return code of BN_div()
  * tpm2: Initialize variables due to gcc complaint (s390x, false positive)
  * tpm12: Initialize variables due to gcc complaint (s390x, false positive)
  * build-sys: Fix configure script to support _FORTIFY_SOURCE=3

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Fixed CVE-2021-3623 (bsc#1187767)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 0.9.3:
  * build-sys: Add probing for -fstack-protector
  * tpm2: Do not call EVP_PKEY_CTX_set0_rsa_oaep_label() for label of size
  * (OSSL 3)
  * tpm2: When writing state initialize s_ContextSlotMask if not set

• Files Changed
• Browse Source

Update to version 0.9.1

• Files Changed
• Browse Source

- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch

• Files Changed
• Browse Source

- Update to version 0.8.4:
  * Reset too large size indicators in TPM2B to avoid access
    beyond buffer
  * Restore original value in buffer if unmarshalled one was
    illegal

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 0.8.2
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)

• Files Changed
• Browse Source