Skip to content

Prepare for v0.10.2 release #544

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
stefanberger merged 2 commits into from
Jan 2, 2026
+19 −0
Merged

Prepare for v0.10.2 release #544

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d32e9ab
CHANGES: Updated CHANGES document for 0.10.2
stefanberger Jan 2, 2026
5282db8
rpm/debian: Add 0.10.2 entry in changelog
stefanberger Jan 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGES
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
CHANGES - changes for libtpms

version 0.10.2:
- tpm2: Fix memory leak by freeing KDF context
- tpm2: Fix retrieval of updated IV when using OpenSSL >= 3.0 (CVE-2026-21444)

version 0.10.1:
- tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133)
- tpm2: fix build for LibreSSL 4.1.0
Expand Down
7 changes: 7 additions & 0 deletions debian/changelog
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,10 @@
libtpms (0.10.2) RELEASED; urgency=high

* tpm2: Fix memory leak by freeing KDF context
* tpm2: Fix retrieval of updated IV when using OpenSSL >= 3.0 (CVE-2026-21444)

-- Stefan Berger <stefanb@linux.ibm.com> Tue, 2 Jan 2026 09:00:00 -0500

libtpms (0.10.1) RELEASED; urgency=high

* tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133)
Expand Down
4 changes: 4 additions & 0 deletions dist/libtpms.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,6 +112,10 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libtpms.la
%postun -p /sbin/ldconfig

%changelog
* Fri Jan 02 2026 Stefan Berger - 0.10.2-1
- tpm2: Fix memory leak by freeing KDF context
- tpm2: Fix retrieval of updated IV when using OpenSSL >= 3.0 (CVE-2026-21444)

* Tue Jun 10 2025 Stefan Berger - 0.10.1-1
- tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133)
- tpm2: fix build for LibreSSL 4.1.0
Expand Down
4 changes: 4 additions & 0 deletions dist/libtpms.spec.in
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,6 +112,10 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libtpms.la
%postun -p /sbin/ldconfig

%changelog
* Fri Jan 02 2026 Stefan Berger - 0.10.2-1
- tpm2: Fix memory leak by freeing KDF context
- tpm2: Fix retrieval of updated IV when using OpenSSL >= 3.0 (CVE-2026-21444)

* Tue Jun 10 2025 Stefan Berger - 0.10.1-1
- tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133)
- tpm2: fix build for LibreSSL 4.1.0
Expand Down