15 Commits

Author SHA1 Message Date
yezengruan
735d3429d5 rename patch 0001-tpm2-CryptSym-fix-AES-output-IV.patch
renamed:
0001-tpm2-CryptSym-fix-AES-output-IV.patch
-> tpm2-CryptSym-fix-AES-output-IV.patch

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 623a7ba3880baa7b46112b297297a6234ab913fe)
2022-05-18 17:00:28 +08:00
imxcc
92aa70088b fix bare word "debug" in spec
Signed-off-by: imxcc <xingchaochao@huawei.com>
(cherry picked from commit 52b4294beb3a3bdc36aed1144c7260b9417285ad)
2022-05-18 17:00:28 +08:00
jiangfangjie 00559066
808cd56ac4 tpm2-Fix-issue-with-misaligned-address-when-marshall
(cherry picked from commit f9d7a34373e9c6de7ef2a5c63c04c020d994b1c7)
2022-05-18 17:00:28 +08:00
jiangfangjie 00559066
b3567bf3c3 tpm2: Initialize a whole OBJECT before using it and NVMarshal: Handle index orderly RAM without 0-sized
terminating node

fix CVE-2021-3746

Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
(cherry picked from commit b108d104dd093ebb1ad83d28995ecde3b0743152)
2022-05-18 17:00:28 +08:00
jiangfangjie 00559066
276da674c4 update libtpms.spec
(cherry picked from commit ceabec5e4bd71516fe2964830e6183ef3cb3e259)
2021-09-14 20:07:44 +08:00
jiangfangjie 00559066
e27a01249c fix the cve-2021-3505
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
(cherry picked from commit 49be9bc2aed2a56d88f89efec8d142b9565fc37e)
2021-09-14 20:07:44 +08:00
jiangfangjie 00559066
1c62fb2410 update spec file
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
2021-04-07 10:38:52 +08:00
jiangfangjie 00559066
a1a4809abf tpm2: CryptSym: fix AES output IV
The TPM is supposed to provide the output IV in the ivInOut parameter in
CryptSymmetricEncrypt. In the case of using the openssl routines, the
output IV is missed, and the resulting output from the TPM is in the
input IV.

OpenSSL unfortunately does not export EVP_CIPHER_CTX_iv() until
tags/OpenSSL_1_1_0, so we have to fall back to the reference code for
previous OpenSSL versions.

Fixes: CVE-2021-3446
buglink:https://bugzilla.redhat.com/show_bug.cgi?id=1939664

Signed-off-by: William Roberts <william.c.roberts@intel.com>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: jiangfangjie 00559066 <jiangfangjie@huawei.com>
2021-04-06 18:19:30 +08:00
jiangfangjie
a5323d08cb update version to versionx
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-17 16:12:45 +08:00
jiangfangjie
2cb9c2ce66 update release
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-16 18:22:58 +08:00
jiangfangjie
f1dc1d5e42 update release
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-16 12:06:12 +08:00
jiangfangjie
9cefddfde8 update release
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-16 09:16:54 +08:00
jiangfangjie
e6e9493e17 update spec file and source file
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-15 20:04:36 +08:00
jiangfangjie
d396320548 update source0
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-09-14 20:18:42 +08:00
jiangfangjie
602e72bb02 init packet with version 0.7.3
Signed-off-by: jiangfangjie <jiangfangjie@huawei.com>
2020-08-21 13:09:43 +08:00