Skip to content
OpenAdvisories
Medium ELSA-2025-12100 1 CVE

Moderate: libtpms security update (Oracle Linux 9)

Published Jul 29, 2025 · Updated Jul 29, 2025

Ecosystem: Oracle Linux

Summary

[0.9.1-5.20211126git1ff6fe1f43]
- Fix CVE-2025-49133
Resolves: RHEL-96258

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 libtpms 0:0.9.1-5.20211126git1ff6fe1f43.el9_6

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-49133

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…

    stefanberger libtpms libtpms libtpms Debian Ubuntu Azure Linux Alpine