From: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed, 21 Jan 2026 13:39:01 +0000 (+0100)
Subject: libtpms: Update to version 0.10.2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=037a5043db22d1c6c5554ce3efb8e771eec4dfbe;p=ipfire-2.x.git

libtpms: Update to version 0.10.2

- Update from version 0.10.1 to 0.10.2
- Update of rootfile
- CVE fix
- Changelog
    0.10.2
	- tpm2: Fix memory leak by freeing KDF context
	- tpm2: Fix retrieval of updated IV when using OpenSSL >= 3.0 (CVE-2026-21444)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/packages/libtpms b/config/rootfiles/packages/libtpms
index 6fce3ebd8..5420d0323 100644
--- a/config/rootfiles/packages/libtpms
+++ b/config/rootfiles/packages/libtpms
@@ -9,7 +9,7 @@
 #usr/lib/libtpms.la
 #usr/lib/libtpms.so
 usr/lib/libtpms.so.0
-usr/lib/libtpms.so.0.10.1
+usr/lib/libtpms.so.0.10.2
 #usr/lib/pkgconfig/libtpms.pc
 #usr/share/man/man3/TPMLIB_CancelCommand.3
 #usr/share/man/man3/TPMLIB_ChooseTPMVersion.3
diff --git a/lfs/libtpms b/lfs/libtpms
index 6116e9412..61cecc20e 100644
--- a/lfs/libtpms
+++ b/lfs/libtpms
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY	   = This library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0).
 
-VER        = 0.10.1
+VER        = 0.10.2
 
 THISAPP    = libtpms-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = libtpms
-PAK_VER    = 2
+PAK_VER    = 3
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 39feead951a84b715e8e4db8cd6eab7f19728c00423df16150c99004230061691cde90fcf7aafc6a5748647ac58cb696b89a709368da4b8f0c684b22321ff1ea
+$(DL_FILE)_BLAKE2 = 19c881d60f8124b6ffe1622731cf73593a38a683cd0a593445ca93033e927c94e1ba75cd30e2847da2137155934f17f785e7dfb96731596361b7a77476cc5a94
 
 install : $(TARGET)
 
@@ -84,10 +84,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	-mkdir -pv $(DIR_APP)
 	cd $(DIR_APP) && autoreconf -vfi
 	cd $(DIR_APP) && ./configure \
-		--prefix=/usr \
-		--with-tpm2 \
-		--with-openssl \
-		--disable-hardening
+				--prefix=/usr \
+				--with-tpm2 \
+				--with-openssl \
+				--disable-hardening
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)