Format: 1.8 Date: Wed, 01 Mar 2023 18:23:14 -0300 Source: libtpms Binary: libtpms-dev libtpms0 Built-For-Profiles: noudeb Architecture: riscv64 Version: 0.9.3-0ubuntu2 Distribution: lunar Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: libtpms-dev - libtpms header files and man pages libtpms0 - TPM emulation library Changes: libtpms (0.9.3-0ubuntu2) lunar; urgency=medium . * SECURITY UPDATE: out-of-bounds read/write - debian/patches/CVE-2023-1017_1018.patch: add a buffer size check and properly reduce bufferSize variable by the number of bytes that make up the cipherSize in CryptParameterDecryption() in src/tpm2/CryptUtil.c - CVE-2023-1017 - CVE-2023-1018 * SECURITY UPDATE: out-of-bounds read - debian/patches/tpm2-Check-size-of-TPM2B_NAME.patch: add a buffer size check in TPM2_PolicyAuthorize() in src/tpm2/EACommands.c. - No CVE number Checksums-Sha1: 5db25e8f477173f0a08182ef407fe025904f3b2a 976338 libtpms-dev_0.9.3-0ubuntu2_riscv64.deb 3d729bdff03cdb84aa70870bfd954265546a15db 299972 libtpms0_0.9.3-0ubuntu2_riscv64.deb c188307a846a6f427c4501986e59f9e2d6600b48 5945 libtpms_0.9.3-0ubuntu2_riscv64.buildinfo Checksums-Sha256: 91fde2aaaee7d9771cd75c68c6c5eee819ac1f1a88b0910b2b127e7629ee4a9d 976338 libtpms-dev_0.9.3-0ubuntu2_riscv64.deb 709a1390c3ebbb16ec29730ddf66ad7ae921baae3e04d7a792382f50172a91d4 299972 libtpms0_0.9.3-0ubuntu2_riscv64.deb b260d5f0f6e859969f5aa6deb2165c6235f247848c2ca96c87790a147f0ef5aa 5945 libtpms_0.9.3-0ubuntu2_riscv64.buildinfo Files: ea4bea01f443e64a0c54c07d274bdf62 976338 libdevel optional libtpms-dev_0.9.3-0ubuntu2_riscv64.deb 4731e4a761c02b3eed5224c496290ea2 299972 libs optional libtpms0_0.9.3-0ubuntu2_riscv64.deb daabb823842326b6956acdb6b153e460 5945 libs optional libtpms_0.9.3-0ubuntu2_riscv64.buildinfo Original-Maintainer: Seunghun Han