[ubuntu/jammy-security] libtpms 0.9.3-0ubuntu1.22.04.1 (Accepted)

[Rodrigo Figueiredo Zaiden]

libtpms (0.9.3-0ubuntu1.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read/write
    - debian/patches/CVE-2023-1017_1018.patch: add a buffer size check and
      properly reduce bufferSize variable by the number of bytes that make
      up the cipherSize in CryptParameterDecryption() in
      src/tpm2/CryptUtil.c
    - CVE-2023-1017
    - CVE-2023-1018
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/tpm2-Check-size-of-TPM2B_NAME.patch: add a buffer
      size check in TPM2_PolicyAuthorize() in src/tpm2/EACommands.c.
    - No CVE number

Date: 2023-03-06 13:43:09.136175+00:00
Changed-By: Rodrigo Figueiredo Zaiden <rodrigo.zaiden at canonical.com>
https://launchpad.net/ubuntu/+source/libtpms/0.9.3-0ubuntu1.22.04.1
-------------- next part --------------
Sorry, changesfile not available.