Thanks, applied as 49ebd974a8945b69ecca784e06485524178c1acb.

Michael

[sent from post-receive hook]

On Sun, 12 May 2024 15:16:37 +0200, Christian Melki 
<christian.me...@t2data.com> wrote:
> https://github.com/tpm2-software/tpm2-tss/releases/tag/4.1.0
> Nothing fancy, a bunch of fixes mostly.
> 
> Plugs CVE:
> CVE-2024-29040 - In tmu_set_table of tmu.c, there is a possible out of bounds 
> write due to a missing bounds check.
> 
> Signed-off-by: Christian Melki <christian.me...@t2data.com>
> Message-Id: <20240428163837.824589-1-christian.me...@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbr...@pengutronix.de>
> 
> diff --git a/rules/tpm2-tss.make b/rules/tpm2-tss.make
> index 729172b4c47c..cf37742c4232 100644
> --- a/rules/tpm2-tss.make
> +++ b/rules/tpm2-tss.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_TPM2_TSS) += tpm2-tss
>  #
>  # Paths and names
>  #
> -TPM2_TSS_VERSION     := 4.0.1
> -TPM2_TSS_MD5         := fff676c669519097906bd8ce28fc4238
> +TPM2_TSS_VERSION     := 4.1.0
> +TPM2_TSS_MD5         := 97e91ce0c77d361409502badb1023e80
>  TPM2_TSS             := tpm2-tss-$(TPM2_TSS_VERSION)
>  TPM2_TSS_SUFFIX              := tar.gz
>  TPM2_TSS_URL         := 
> https://github.com/tpm2-software/tpm2-tss/releases/download/$(TPM2_TSS_VERSION)/$(TPM2_TSS).$(TPM2_TSS_SUFFIX)

Reply via email to