linux/meta-security.git/meta-tpm, branch kirkstone

Update maintainers

2026-01-14T21:32:43+00:00

Add Marta and myself as maintainers for meta-security and the other embedded layers that Armin had been maintaining. To avoid Armin getting bugged about individual recipes, set the RECIPE_MAINTAINER variables to myself. (backport from master) Signed-off-by: Scott Murray Signed-off-by: Richard Purdie

tpm2-tss: upgrade 3.2.2 -> 3.2.3

2024-09-15T14:58:35+00:00

Changelog: https://github.com/tpm2-software/tpm2-tss/releases/tag/3.2.3 Includes Security fix: CVE-2024-29040 Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

tpm2-tools: Upgrade 5.2 -> 5.7

2024-09-15T14:58:09+00:00

Include Security fixes: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Changelog: https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.6 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.5 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.4 https://github.com/tpm2-software/tpm2-tools/releases/tag/5.3 Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

tpm2-tss: ignore CVE-2023-22745

2023-07-30T13:09:22+00:00

As already mentioned in upgrade commit, this CVE is fixed. But cve_check still reports it as NVD DB was not updated. Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-06-08T17:26:03+00:00

Changelog: 3.2.2 A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. FAPI: undefined reference to curl_url_strerror when using curl less than 7.80.0. 3.2.1 Makefile.am: make all EXTRA_DIST includes unconditional to fix pristine tars Fix usage of NULL pointer if Esys_TR_SetAuth is calles with ESYS_TR_NONE. Store VERSION into the release tarball. fapi: fix usage of policy_nv with a TPM nv index. Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea handle and not as parameter one, this affected the contents of cpHash. linking tcti for libtpms against tss2-tctildr. It should be linked against tss2-mu. build: Remove erroneous trailing comma in linker option. Bug #2391. esys: fix allow usage of HMAC sessions for Esys_TR_FromTPMPublic. test: build with opaque FILE structure like in musl libc. Usage of a second profile in a path was not possible because the default profile was always used. FAPI: Fix provisioning if auth value for storage hierarchy was set. FAPI: Fix recreation of EK. FAPI: Fix usage of lockout auth value in Fapi_Provison. FAPI: Fix loading of key in policy execution. FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being reflected across profiles. Esys_PCR_SetAuthValue: remembers the auth like other SetAutg ESAPI functions. tests: esys-pcr-auth-value.int moved to destructive tests. FAPI: Fix double free if keystore is corrupted. Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

oeqa: meta-tpm shut swtpm down before and after testing

2023-02-22T20:31:09+00:00

fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster (cherry picked from commit b5642c519b90f83ab6ec1507db9b3b36db43c548) [Fixup for kirkstone context] Signed-off-by: Armin Kuster

oeqa/tpm2: fix and cleanup tests

2023-02-22T20:29:22+00:00

Signed-off-by: Armin Kuster (cherry picked from commit 3db9e08300c3d5e3f7b6e4e6cb743a914ed3f00b) Signed-off-by: Armin Kuster

oeqa/cases/tpm2: fix and enhance test suite

2022-05-23T14:56:47+00:00

local.conf TEST_SUITES = "ssh ping tpm2" IMAGE_INSTALL:append = " swtpm tpm2-pkcs11" RESULTS: RESULTS - ping.PingTest.test_ping: PASSED (0.05s) RESULTS - ssh.SSHTest.test_ssh: PASSED (2.19s) RESULTS - tpm2.Tpm2Test.test_tpm2_pcrread: PASSED (1.06s) RESULTS - tpm2.Tpm2Test.test_tpm2_pkcs11: PASSED (1.17s) RESULTS - tpm2.Tpm2Test.test_tpm2_swtpm_reset: PASSED (0.59s) RESULTS - tpm2.Tpm2Test.test_tpm2_swtpm_socket: PASSED (307.72s) Signed-off-by: Armin Kuster (cherry picked from commit 8be830dd85846a1a7da18a1a4adb2aa87cba5c78) Signed-off-by: Armin Kuster

tpm2-tools: Add missing rdepends

2022-05-23T14:56:47+00:00

Signed-off-by: Armin Kuster (cherry picked from commit 311b7daea1eac094b7221c8b487b5e94b0605fc6) Signed-off-by: Armin Kuster

tpm2-pkcs11: tpm2-pkcs11 module missing

2022-05-23T14:56:26+00:00

Correctly fix symlink issue by putting module in -dev pkg. Signed-off-by: Armin Kuster (cherry picked from commit 3045de13abe1ee6c39e06d1ce0d2b31478d2ff35) Signed-off-by: Armin Kuster