From 17be3c2dcd33a57e1a606416146e1f110c09bba2 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Fri, 11 Sep 2026 23:13:16 +0200 Subject: [PATCH] package/tpm2-tools: security bump version to 5.8 https://github.com/tpm2-software/tpm2-tools/blob/5.8/docs/CHANGELOG.md Fixes: GHSA-v7w4-4gc9-qcgv, GHSA-gwfg-w3jr-xh66 & GHSA-qp88-8f4j-wv7q. Switched to sha256 tarball hash provided by upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/tpm2-tools/tpm2-tools.hash | 3 ++- package/tpm2-tools/tpm2-tools.mk | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/package/tpm2-tools/tpm2-tools.hash b/package/tpm2-tools/tpm2-tools.hash index cb7e8085d6..a2ce45205e 100644 --- a/package/tpm2-tools/tpm2-tools.hash +++ b/package/tpm2-tools/tpm2-tools.hash @@ -1,3 +1,4 @@ +# From https://github.com/tpm2-software/tpm2-tools/releases/tag/5.8 +sha256 1cb73185cae814b4e15c7c2d0b22642d640faf48775f4156a1fd92edf84bef73 tpm2-tools-5.8.tar.gz # Locally computed: -sha256 3810d36b5079256f4f2f7ce552e22213d43b1031c131538df8a2dbc3c570983a tpm2-tools-5.7.tar.gz sha256 f6995d52c8b8e4d2c3bace7fc9c330a77a90d808166fbad4d7ead7e8ba2fc66c docs/LICENSE diff --git a/package/tpm2-tools/tpm2-tools.mk b/package/tpm2-tools/tpm2-tools.mk index cdb8931a3c..72b0dbf8c5 100644 --- a/package/tpm2-tools/tpm2-tools.mk +++ b/package/tpm2-tools/tpm2-tools.mk @@ -4,7 +4,7 @@ # ################################################################################ -TPM2_TOOLS_VERSION = 5.7 +TPM2_TOOLS_VERSION = 5.8 TPM2_TOOLS_SITE = https://github.com/tpm2-software/tpm2-tools/releases/download/$(TPM2_TOOLS_VERSION) TPM2_TOOLS_LICENSE = BSD-3-Clause TPM2_TOOLS_LICENSE_FILES = docs/LICENSE