Skip to content
OpenAdvisories
Medium RLSA-2025:16428 1 CVE

Moderate: libtpms security update

Published Oct 3, 2025 · Updated Oct 3, 2025

Ecosystem: Rocky Linux

Summary

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

* libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 libtpms 0:0.9.6-11.el10_0

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-49133

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…

    stefanberger libtpms libtpms libtpms Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2371585