Skip to content
OpenAdvisories
Medium ALSA-2025:16428 1 CVE

Moderate: libtpms security update

Published Sep 23, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

* libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 10 libtpms 0.9.6-11.el10_0

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-49133

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…

    stefanberger libtpms libtpms libtpms Debian Ubuntu Azure Linux Alpine

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-49133
  • report
    https://bugzilla.redhat.com/2371585
  • advisory
    https://errata.almalinux.org/10/ALSA-2025-16428.html