diff --git a/configure.ac b/configure.ac index f7cf00702..0650d56a5 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ # # See the LICENSE file for the license associated with this file. -AC_INIT([libtpms],[0.9.7]) +AC_INIT([libtpms],[0.9.8]) AC_PREREQ([2.69]) AC_CONFIG_SRCDIR(Makefile.am) AC_CONFIG_AUX_DIR([.]) diff --git a/dist/libtpms.spec b/dist/libtpms.spec index 0306ac56a..5c1c497a4 100644 --- a/dist/libtpms.spec +++ b/dist/libtpms.spec @@ -1,7 +1,7 @@ # --- libtpm rpm-spec --- %define name libtpms -%define version 0.9.7 +%define version 0.9.8 %define release 1 # Valid crypto subsystems are 'freebl' and 'openssl' @@ -112,6 +112,7 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libtpms.la %postun -p /sbin/ldconfig %changelog + * Tue Jun 10 2025 Stefan Berger - 0.9.7-1 - tpm2: Fix potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133) - tpm2: Remove assigned-to value to offset because it is unused (Coverity) diff --git a/include/libtpms/tpm_library.h b/include/libtpms/tpm_library.h index ceb0033ac..6cde5f4a4 100644 --- a/include/libtpms/tpm_library.h +++ b/include/libtpms/tpm_library.h @@ -50,7 +50,7 @@ extern "C" { #define TPM_LIBRARY_VER_MAJOR 0 #define TPM_LIBRARY_VER_MINOR 9 -#define TPM_LIBRARY_VER_MICRO 7 +#define TPM_LIBRARY_VER_MICRO 8 #define TPM_LIBRARY_VERSION_GEN(MAJ, MIN, MICRO) \ (( MAJ << 16 ) | ( MIN << 8 ) | ( MICRO )) diff --git a/src/tpm_library.c b/src/tpm_library.c index 20153b7b4..9000c5d5d 100644 --- a/src/tpm_library.c +++ b/src/tpm_library.c @@ -424,7 +424,7 @@ static unsigned char *TPMLIB_GetPlaintext(const char *stream, const char *endtag, size_t *length) { - char *start, *end; + const char *start, *end; unsigned char *plaintext = NULL; start = strstr(stream, starttag);