rpms/libtpms
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

libtpms: update to 0.10.2 #3

Merged
sbelikov merged 2 commits from update-libtpms-0.10.2 into niceos-5.2 2026-05-10 00:04:25 +03:00
Conversation 0 Commits 2 Files changed 2 +12 -2
sbelikov commented 2026-05-09 23:59:51 +03:00
Owner
Copy link

Upstream released libtpms 0.10.2 as a small patch update over 0.10.1.

Upstream release notes list two fixes only:

  • TPM2 memory leak fix by freeing the KDF context
  • TPM2 IV retrieval fix for OpenSSL >= 3.0, tied upstream to CVE-2026-21444

Risk assessment for NiceOS:

  • No upstream ABI/API/CLI changes were announced.
  • This is a leaf package, so functional impact should be limited.
  • Manual review is still required because the compare includes build-system-related updates and the NiceOS spec/rebuild path has not been verified yet.

Packaging checks needed before merge:

  • bump Version/Source references to 0.10.2
  • refresh source checksum/lock data
  • rebuild in the target branch environment
  • run %check and a TPM2/vTPM smoke test if available
  • confirm no downstream spec patches conflict with upstream changes

References:

Upstream released libtpms 0.10.2 as a small patch update over 0.10.1. Upstream release notes list two fixes only: - TPM2 memory leak fix by freeing the KDF context - TPM2 IV retrieval fix for OpenSSL >= 3.0, tied upstream to CVE-2026-21444 Risk assessment for NiceOS: - No upstream ABI/API/CLI changes were announced. - This is a leaf package, so functional impact should be limited. - Manual review is still required because the compare includes build-system-related updates and the NiceOS spec/rebuild path has not been verified yet. Packaging checks needed before merge: - bump Version/Source references to 0.10.2 - refresh source checksum/lock data - rebuild in the target branch environment - run `%check` and a TPM2/vTPM smoke test if available - confirm no downstream spec patches conflict with upstream changes References: - https://github.com/stefanberger/libtpms/releases/tag/v0.10.2 - https://github.com/stefanberger/libtpms/compare/v0.10.1...v0.10.2 - https://github.com/stefanberger/libtpms/security/advisories/GHSA-25w5-6fjj-hf8g
sbelikov merged commit e9013a40df into niceos-5.2 2026-05-10 00:04:25 +03:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
ai-summary
Issue contains local NiceSOFT AI generated preliminary analysis

  
bot
Created by automation

  
needs-build
Needs build verification

  
needs-triage
Needs maintainer triage

  
priority/high
High priority

  
security-release
Release notes mention security fixes or CVE

  
update/patch
Patch-level update

  
upstream-update
New upstream version is available

  
upstream/github
GitHub upstream

No labels
ai-summary
bot
needs-build
needs-triage
priority/high
security-release
update/patch
upstream-update
upstream/github
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
rpms/libtpms!3
No description provided.