Format: 1.8 Date: Wed, 01 Mar 2023 18:23:14 -0300 Source: libtpms Binary: libtpms-dev libtpms0 Built-For-Profiles: noudeb Architecture: amd64 Version: 0.9.3-0ubuntu2 Distribution: lunar-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: libtpms-dev - libtpms header files and man pages libtpms0 - TPM emulation library Changes: libtpms (0.9.3-0ubuntu2) lunar; urgency=medium . * SECURITY UPDATE: out-of-bounds read/write - debian/patches/CVE-2023-1017_1018.patch: add a buffer size check and properly reduce bufferSize variable by the number of bytes that make up the cipherSize in CryptParameterDecryption() in src/tpm2/CryptUtil.c - CVE-2023-1017 - CVE-2023-1018 * SECURITY UPDATE: out-of-bounds read - debian/patches/tpm2-Check-size-of-TPM2B_NAME.patch: add a buffer size check in TPM2_PolicyAuthorize() in src/tpm2/EACommands.c. - No CVE number Checksums-Sha1: f792d46cd6775f7ccdf88e1fe732237a18ad553a 483430 libtpms-dev_0.9.3-0ubuntu2_amd64.deb 5d65ecf96066cecbc996906df8cd7b5aa7708fc8 1544022 libtpms0-dbgsym_0.9.3-0ubuntu2_amd64.ddeb 52de5d1135b4db7545da66c9ef51e923138bf104 378084 libtpms0_0.9.3-0ubuntu2_amd64.deb 4bbbad64bbfb41025360b7474c205adfeaaa8f86 6297 libtpms_0.9.3-0ubuntu2_amd64.buildinfo Checksums-Sha256: abd31d99c65951e868a3a740e6b10260102dd45027461fafdcbb71a11ae42101 483430 libtpms-dev_0.9.3-0ubuntu2_amd64.deb fa45b596db592d6496430158cf21f676459e5f648978e808a4f984d422001b0a 1544022 libtpms0-dbgsym_0.9.3-0ubuntu2_amd64.ddeb 3266e21cc2e368bd6891b4f40d2d3ef330e20240f0160fe45e006c7a7dd38039 378084 libtpms0_0.9.3-0ubuntu2_amd64.deb 7802d0d678e98f6a6fe1127ef68d25fa73603169464e38874b9412a289eca5a7 6297 libtpms_0.9.3-0ubuntu2_amd64.buildinfo Files: 930250746d836d3a827ebc2b727038db 483430 libdevel optional libtpms-dev_0.9.3-0ubuntu2_amd64.deb 7f33b3be67ad47e9821d00d2858a9b64 1544022 debug optional libtpms0-dbgsym_0.9.3-0ubuntu2_amd64.ddeb 959af88defab5f575bb0bf9a3b26f957 378084 libs optional libtpms0_0.9.3-0ubuntu2_amd64.deb 80e3a4a9f327741827acdc38f488e7dc 6297 libs optional libtpms_0.9.3-0ubuntu2_amd64.buildinfo Original-Maintainer: Seunghun Han