Skip to content
OpenAdvisories
Medium ELSA-2025-16428 1 CVE

Moderate: libtpms security update (Oracle Linux 10)

Published Sep 23, 2025 · Updated Sep 23, 2025

Summary

[0.9.6-11]
- Fix CVE-2025-49133
Resolves: RHEL-96247

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 libtpms 0:0.9.6-11.el10_0

Vulnerabilities 1

  • Medium 5.9

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…