libtpms (0.9.3-0ubuntu1.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds access, denial of service
    - debian/patches/CVE-2025-49133.patch: Fix potential out-of-
    bound access & abort due to HMAC signing issue in tpm2/CryptUtil.c
    - CVE-2025-49133

 -- Elise Hlady <elise.hlady@canonical.com>  Tue, 24 Jun 2025 16:23:40 -0700

libtpms (0.9.3-0ubuntu1.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read/write
    - debian/patches/CVE-2023-1017_1018.patch: add a buffer size check and
      properly reduce bufferSize variable by the number of bytes that make
      up the cipherSize in CryptParameterDecryption() in
      src/tpm2/CryptUtil.c
    - CVE-2023-1017
    - CVE-2023-1018
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/tpm2-Check-size-of-TPM2B_NAME.patch: add a buffer
      size check in TPM2_PolicyAuthorize() in src/tpm2/EACommands.c.
    - No CVE number

 -- Rodrigo Figueiredo Zaiden <rodrigo.zaiden@canonical.com>  Wed, 01 Mar 2023 15:26:10 -0300

libtpms (0.9.3-0ubuntu1) jammy; urgency=medium

  * merge 0.9.3 from upstram to stabilize libtpms in jammy; related to
    but not fixing (LP: 1948748)
    - d/p/lp-1948748-tpm2-Address-Coverity-Issue-by-casting-1-before-shif.patch:
      avoid bad shift
    - drop d/p/fix-openssl3-compat.patch: part of 0.9.3
    - drop d/p/uninitialized-variable.patch: no more needed
    - ppc64 fixes from upstream as identified and added to debian 0.9.2-3
      + d/p/do_not_inline_makeiv.patch
      + d/p/no_local_check.patch
    - d/p/lp-1948748-tpm2-Check-return-code-of-BN_div.patch: fix
      coverity finding

 -- Christian Ehrhardt <christian.ehrhardt@canonical.com>  Wed, 30 Mar 2022 09:04:10 +0200

libtpms (0.9.0-0ubuntu4) jammy; urgency=medium

  * d/p/fix-openssl3-compat.patch: Cherry-picked from upstream (LP: #1962601)

 -- Simon Chopin <simon.chopin@canonical.com>  Thu, 24 Mar 2022 19:11:59 +0100

libtpms (0.9.0-0ubuntu3) jammy; urgency=medium

  * No-change rebuild against openssl3

 -- Simon Chopin <simon.chopin@canonical.com>  Wed, 24 Nov 2021 13:54:17 +0000

libtpms (0.9.0-0ubuntu2) jammy; urgency=medium

  * Add autopkgtest.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 05 Nov 2021 16:10:38 +0000

libtpms (0.9.0-0ubuntu1) jammy; urgency=medium

  * New upstream release.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 04 Nov 2021 14:46:26 -0700

libtpms (0.8.2-1ubuntu1) impish; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/patches/uninitialized-variable.patch: fix issues of variables
      that may be used before initialization.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Tue, 27 Apr 2021 23:55:31 -0700

libtpms (0.8.2-1) unstable; urgency=medium

  * New upstream version 0.8.2
  * Fix a security issue, CVE-2021-3446 (Closes: #986799)
  * debian/patches: Remove some useless patches because of new upstream
    version
  * debian/copyright: Fix lintian issues

 -- Seunghun Han <kkamagui@gmail.com>  Wed, 14 Apr 2021 13:49:01 +0900

libtpms (0.8.0~dev1-1.2ubuntu1) hirsute; urgency=medium

  * debian/patches/uninitialized-variable.patch: fix issues of variables
    that may be used before initialization.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 09 Dec 2020 19:31:25 +0000

libtpms (0.8.0~dev1-1.2) unstable; urgency=medium

  * Fix a non-reproducible bug caused by the invalid path (Closes: #964768)
  * Fix a FTBFS bug caused by the incomplete condition (Closes: #966857)

 -- Seunghun Han <kkamagui@gmail.com>  Sun, 09 Aug 2020 02:31:09 +0900

libtpms (0.8.0~dev1-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * debian/control: Set git packaging repo to be under Salsa Debian
    group.
  * Source-only upload to allow testing migration.
  * debian/install: Also install static library for -dev package.

 -- Boyuan Yang <byang@debian.org>  Tue, 07 Jul 2020 10:58:58 -0400

libtpms (0.8.0~dev1-1) unstable; urgency=medium

  * New maintainer (Closes: #958071)
  * Updated standards version to 4.5.0 in debian/control
  * Updated debhelper version to 12 in debian/control
  * Added Rules-Requires-Root to debian/control
  * Added Vcs-Browser and Vcs-Git to debian/control
  * Removed autotools-dev and dh-autoreconf from debian/control since enabled
    by default
  * Removed autotools-dev, parallel options from debian/rules since deprecated
    and enabled by default
  * Converted debian/copyright to dep5-copyright format
  * Added debian/watch file
  * Added debian/libtpms.symbols file
  * Added debian/upstream/metadata file
  * Changed section of man pages from 1 to 3
  * Fixed typos and a long line warning in man pages
  * Set date of man pages to last changelog entry

 -- Seunghun Han <kkamagui@gmail.com>  Sat, 18 Apr 2020 09:20:03 +0900

