https://github.com/tpm2-software/tpm2-tss/releases/tag/4.1.0 Nothing fancy, a bunch of fixes mostly.
Plugs CVE: CVE-2024-29040 - In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. Signed-off-by: Christian Melki <christian.me...@t2data.com> --- rules/tpm2-tss.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/tpm2-tss.make b/rules/tpm2-tss.make index 729172b4c..cf37742c4 100644 --- a/rules/tpm2-tss.make +++ b/rules/tpm2-tss.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_TPM2_TSS) += tpm2-tss # # Paths and names # -TPM2_TSS_VERSION := 4.0.1 -TPM2_TSS_MD5 := fff676c669519097906bd8ce28fc4238 +TPM2_TSS_VERSION := 4.1.0 +TPM2_TSS_MD5 := 97e91ce0c77d361409502badb1023e80 TPM2_TSS := tpm2-tss-$(TPM2_TSS_VERSION) TPM2_TSS_SUFFIX := tar.gz TPM2_TSS_URL := https://github.com/tpm2-software/tpm2-tss/releases/download/$(TPM2_TSS_VERSION)/$(TPM2_TSS).$(TPM2_TSS_SUFFIX) -- 2.34.1
