%global gitdate   20211126

%global gitversion 1ff6fe1f43

Name:           libtpms

Version:        0.9.1

Release:        3.%{gitdate}git%{gitversion}%{?dist}

Summary: Library providing Trusted Platform Module (TPM) functionality

License:        BSD

Url:            http://github.com/stefanberger/libtpms

Source0:        libtpms-%{gitdate}.tar.xz

Patch0001:      0001-tpm2-Do-not-call-EVP_PKEY_CTX_set0_rsa_oaep_label-fo.patch

Patch0002:      0001-tpm2-Fix-size-check-in-CryptSecretDecrypt.patch

Patch0003:      0001-tpm2-When-writing-state-initialize-s_ContextSlotMask.patch

Patch0004:      0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch

BuildRequires:  openssl-devel

BuildRequires:  pkgconfig gawk sed

BuildRequires:  automake autoconf libtool bash coreutils gcc-c++

BuildRequires: make

%description

A library providing TPM functionality for VMs. Targeted for integration

into Qemu.

%package        devel

Summary:        Include files for libtpms

Requires:       %{name}%{?_isa} = %{version}-%{release}

%description   devel

Libtpms header files and documentation.

%prep

%autosetup -p1 -n %{name}-%{gitdate}

%build

NOCONFIGURE=1 sh autogen.sh

%configure --disable-static --with-tpm2 --without-tpm1 --with-openssl

%make_build

%check

make check

%install

%make_install

find %{buildroot} -type f -name '*.la' | xargs rm -f -- || :

%ldconfig_scriptlets

%files

%license LICENSE

%doc README CHANGES

%{_libdir}/lib*.so.*

%files devel

%dir %{_includedir}/%{name}

%{_includedir}/%{name}/*.h

%{_libdir}/lib*.so

%{_libdir}/pkgconfig/*.pc

%{_mandir}/man3/*

%changelog

* Wed Mar 01 2023 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43

- Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)

  Resolves: rhbz#2173960

  Resolves: rhbz#2173967

* Mon Jun 20 2022 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-2.20211126git1ff6fe1f43

- Backport s_ContextSlotMask initialization fix

  Resolves: rhbz#2035731

* Mon Jun 13 2022 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-1.20211126git1ff6fe1f43

- Backport RSA/OAEP fixes.

  Resolves: rhbz#2093651

* Wed Dec 01 2021 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-0.20211126git1ff6fe1f43

- Rebase to 0.9.1

  Resolves: rhbz#2027951

* Tue Nov  9 2021 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-0.20211004gitdc4e3f6313

- Rebase to 0.9.0, disable TPM 1.2

  Resolves: rhbz#1990152 & rhbz#2021628

* Tue Aug 31 2021 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7

- Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets

  Resolves: rhbz#1999303

* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.6

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Wed Jun 30 2021 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5

- Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM

  Resolves: rhbz#1976814

* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.4

- Rebuilt for RHEL 9 BETA for openssl 3.0

  Related: rhbz#1971065

* Tue May 18 2021 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3

- Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.

  Fixes: rhbz#1958054

* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.2

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

* Mon Mar 01 2021 Stefan Berger <stefanb@linux.ibm.com> - 0.8.2-0.20210301git729fc6a4ca

- tpm2: CryptSym: fix AES output IV; a CVE has been filed for this issue

* Sat Feb 27 2021 Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-0.20210227git5bf2746e47

- Fixed a context save and suspend/resume problem when public keys are loaded

* Thu Feb 18 2021 Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466

- Addressed UBSAN and cppcheck detected issues

- Return proper size of ECC Parameters to pass HLK tests

* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.4-0.20201031git2452a24dab.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

* Sat Oct 31 2020 Stefan Berger <stefanb@linux.ibm.com> - 0.7.4-0.20201031git2452a24dab

- Follow stable-0.7.0 branch to v0.7.4 with security-related fixes

* Fri Jul 31 2020 Stefan Berger <stefanb@linux.ibm.com> - 0.7.3-0.20200731git1d392d466a

- Follow stable-0.7.0 branch to v0.7.3

* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.2-0.20200527git7325acb477.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Wed May 27 2020 Stefan Berger <stefanb@linux.ibm.com> - 0.7.2-0.20200527git7325acb477

- Following stable-0.7.0 branch for TPM 2 related fixes: RSA decryption,

  PSS salt length, symmetric decryption (padding)

- Under certain circumstances an RSA decryption could cause a buffer overflow causing

  termination of the program (swtpm)

* Wed May 20 2020 Stefan Berger <stefanb@linux.ibm.com> - 0.7.1-0.20200520git8fe99d1fd0

- Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related patch

- elliptic curve fixes

- MANUFACTURER changed from "IBM " to "IBM"

- gcc 10 related fix

* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-0.20191018gitdc116933b7.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

* Fri Oct 18 2019 Stefan Berger <stefanb@linux.ibm.com> - 0.7.0-0.20191018gitdc116933b7

- Following stable-0.7.0 branch for TPM 1.2 related bugfix

* Tue Oct 08 2019 Stefan Berger <stefanb@linux.ibm.com> - 0.7.0-0.20191008gitc26e8f7b08

- Following stable-0.7.0 branch for bug fix

* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-0.20190719gitd061d8065b.2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

* Fri Jul 19 2019 Stefan Berger <stefanb@linux.ibm.com> - 0.7.0-0.20190719gitd061d8065b

- Update to v0.7.0

* Fri May 10 2019 Stefan Berger <stefanb@linux.ibm.com> - 0.6.1-0.20190510gitb244bdf6e2

- Applied bugfix for CMAC

* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.6.1-0.20190121git9dc915572b.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

* Mon Jan 21 2019 Stefan Berger <stefanb@linux.ibm.com> - 0.6.1-0.20190121git9dc915572b

- Libtpms was updated to rev. 150 of TPM 2.0 code

- following branch stable-0.6.0

* Tue Dec 11 2018 Stefan Berger <stefanb@linux.ibm.com> - 0.6.0-0.20181211gitba56737b93

- Following bugfixes in libtpms

* Wed Oct 31 2018 Stefan Berger <stefanb@linux.ibm.com> - 0.6.0-0.20181031git0466fcf6a4

- Following improvements in libtpms

* Tue Sep 18 2018 Stefan Berger 

- Fixed changelog

* Mon Sep 17 2018 Stefan Berger 

- Build snapshot from git after libtpms fix.

* Fri Sep 14 2018 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.6.0-0.20180914git4111bd1bcf

- Build snapshot from git, simplify spec

* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.2-12

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.2-11

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.2-10

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.2-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.2-8

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.2-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.2-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.2-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Sat Aug 16 2014 Stefan Berger - 0.5.2-3

- do not include libtpms.la in rpm

* Mon Jul 14 2014 Stefan Berger - 0.5.2-2

- Added patches

* Mon Jun 30 2014 Stefan Berger - 0.5.2-1

- Updated to version 0.5.2

- coverity fixes

- fixes for ARM64 using __aarch64__

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.1-20.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.1-19

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Mar 25 2013 Stefan Berger - 0.5.1-18

- Ran autoreconf for support of aarch64

- Checking for __arm64__ in code

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.1-17

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.1-16

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Fri Feb 17 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 0.5.1-15

- Add dist tag as required by package guidelines

* Fri Jan 27 2012 Stefan Berger - 0.5.1-14

- fix gcc-4.7 compilation problem

* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.1-13

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Tue Dec 20 2011 Dan Horák <dan[at]danny.cz> - 0.5.1-12

- fix build on secondary arches

* Wed Nov 2 2011 Stefan Berger - 0.5.1-11

- added (lib)gmp as runtime dependency

* Sat Oct 8 2011 Stefan Berger - 0.5.1-10

- internal fixes; callback fixes

* Tue Aug 30 2011 Stefan Berger - 0.5.1-9

- new directory structure and build process

* Tue Jul 12 2011 Stefan Berger - 0.5.1-8

- added pkgconfig as build dependency

- enabling __powerpc__ build following Bz 728220

* Wed May 25 2011 Stefan Berger - 0.5.1-7

- increasing NVRAM area space to have enough room for certificates

* Wed May 25 2011 Stefan Berger - 0.5.1-6

- adding libtpms.pc pkg-config file

* Wed Apr 13 2011 Stefan Berger - 0.5.1-5

- adding BuildRequires for nss-softokn-freebl-static

- several libtpms-internal changes around state serialization and 

  deserialization

- fixes to libtpms makefile (makefile-libtpms)

- adding build_type to generate a debug or production build

- need nss-devel to have nss-config

* Tue Mar 08 2011 Stefan Berger - 0.5.1-4

- small fixes to libtpms makefile

* Fri Feb 25 2011 Stefan Berger - 0.5.1-3

- removing release from tar ball name

- Use {?_smp_mflags} for make rather than hardcoding it

- Fixing post and postun scripts; removing the scripts for devel package

- Fixing usage of defattr

- Adding version information into the changelog headers and spaces between the changelog entries

- Adding LICENSE, README and CHANGELOG file into tar ball and main rpm

- Removing clean section

- removed command to clean the build root

- adding library version to the libries required for building and during

  runtime

- Extended Requires in devel package with {?_isa}

* Fri Feb 18 2011 Stefan Berger - 0.5.1-2

- make rpmlint happy by replacing tabs with spaces

- providing a valid URL for the tgz file

- release is now 2 -> 0.5.1-2

* Mon Jan 17 2011 Stefan Berger - 0.5.1-1

- Update version to 0.5.1

* Fri Jan 14 2011 Stefan Berger - 0.5.0-1

- Changes following Fedora review comments

* Thu Dec 2 2010 Stefan Berger

- Small tweaks after reading the FedoreCore packaging requirements

* Tue Nov 16 2010 Stefan Berger

- Created initial version of rpm spec files

- Version of library is now 0.5.0

- Debuginfo rpm is built but empty -- seems to be a known problem

  Check https://bugzilla.redhat.com/show_bug.cgi?id=209316