4.2.0

Security

• Fixes: GHSA-q759-vqg7-8rc5 CVE-ID requested
• Fixes: GHSA-7638-f8gq-c475 CVE-ID requested
• Fixes: GHSA-x5j2-26fc-hhc3 CVE-ID requested
• Fixes: GHSA-p3px-r4mm-jpw5 CVE-ID requested
• Fixes: GHSA-v2qp-xh5m-44mf CVE-ID requested
• Fixes: GHSA-xqrv-v8rj-v8xw CVE-ID requested
• Fixes: GHSA-gf8g-2r5c-74c7 CVE-ID requested
• Fixes: GHSA-6grq-c24j-xcjr CVE-ID requested
• Fixes: GHSA-pcpw-8625-jqcp CVE-ID requested
• Fixes: GHSA-mj78-pj5v-wvjx CVE-ID requested
• Fixes: GHSA-2q5v-c7hv-fvpf CVE-ID requested

Changed

• Changed the project to clang-format which is now mandatory to run before posting PRs.
  This include the public include files, though no functionality were changed there.
• Extended CI to include linting with: clang-format, clang-tidy, reuse

Fixed

• Fix: In some calloc calls the parameters number of elements and size were swapped.
• configure.ac: Fix test of == to = to be POSIX compliant
• FAPI: Add check whether auth values exist for hierarchies.
• Fixed headers given iwyu output
• Remove use of which in favor of command -v
• TCTI: Fix leak if Tss2_TctiLdr_Initialize fails.
• FAPI: Fix usage of imported external PEM keys for PolicyAuthorize.
• test: skip tcti-spidev on 32bit architectures with 64bit time_t
• TCTI: fix incomplete teardown in tcti-mssim.
• FAPI: Fix Fapi_GetPlatformCertificates without certificates.
• test: Fix incomplete teardown in error cased.
• configure: install tmpfiles.d and sysusers.d in libdir
• FAPI: Fixed leak in Fapi_Sign
• FAPI: Fix Fapi_GetPlatformCertificates without certificates does not return TSS2_FAPI_RC_NO_CERT.
• FAPI: Fix instantiation of policyduplication select when object name or public data is used.
• FAPI: Fix nv object authorization for policy authorize nv.
• TCTI: Fixed possible “Resource temporarily unavailable” (EAGAIN) errors
• TESTS: Fixed use of PCR16
• TCTI: Separate namespaces for internal struct
• ESYS: Fix variable usage in logging message
• Fix CodeQL complaints
• ESYS: Fix usage of handles in Esys_AC_Send
• FAPI: Fix segmentation fault in policy callbacks.
• FAPI: Add proper OOM handling for profile realloc.
• FAPI: add missing NULL check after malloc in encode_ek_public.
• FAPI: memset zero is called in the async functions for the command state to ensure the correct cleanup in error cases.
• tests: Switch to latest cmocka layout
• FAPI: Fix get_booleal_from_json
• ESYS: Fix handling of TPM_RH_NULL handles with sessions

Added

• Add clang-format to CI
• Add clang-tidy to CI
• Add a .clang-tidy file and applied changes to all source code
• Add udev rules to create tcm device
• FAPI: Support storing EK Certificate chains in NVRAM.
• FAPI: KDF scheme KDF2 added.
• tcti: add interface config option for spi-ftdi.
• Complete license information (including non-code) with REUSE
• Add REUSE tool to CI
• FAPI: Add new profiles for high range EKs
• FAPI: Create FAPI NV objects for existing NV indexes
• Enable ARM64 build on Windows
• FAPI: Allow usage of restricted keys in Fapi_Sign .
• FAPI: Nuvoton certificates added.
• MU: add TPM2_ST_ATTEST_NV_DIGEST attestation type support
• OpenSSL 4.0 compatible macro usage

4.1.4

Security

• Fixes: GHSA-q759-vqg7-8rc5
• Fixes: GHSA-7638-f8gq-c475
• Fixes: GHSA-p3px-r4mm-jpw5
• Fixes: GHSA-x5j2-26fc-hhc3
• Fixes: GHSA-gf8g-2r5c-74c7
• Fixes: GHSA-mj78-pj5v-wvjx
• Fixes: GHSA-v2qp-xh5m-44mf
• Fixes: GHSA-2q5v-c7hv-fvpf
• Fixes: GHSA-pcpw-8625-jqcp
• Fixes: GHSA-6grq-c24j-xcjr

Fixes

• FAPI: fix double free in an error case.
• FAPI: Fix usage of external PEM keys for PolicyAuthorize
• FAPI: Fix segfault if Fapi_SetBranchCB is not called
• FAPI: fix usage after free in policy callback
• FAPI: Fix nv object authorization for policy authorize nv
• FAPI: Fix instantiation of policyduplication select
• FAPI: Fix leak in Fapi_Sign
• FAPI: Fix get_booleal_from_json
• ESYS: Fix handling of TPM_RH_NULL handles with sessions

4.1.3

Fixed

• Fix name collisions during dlopen() on some linkers

4.1.2

Fixed

• configure.ac: Fix test of == to = to be POSIX comliant
• Remove use of which in favor of command -v

4.1.1

Fixed

• Fixed inclusion of .map and .def files in release tar balls

4.1.0

Security

• Fixed CVE-2024-29040

Fixed

• fapi: Fix length check on FAPI auth callbacks
• mu: Correct error message for errors
• tss2-rc: fix unknown laer handler dropping bits.
• fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
• fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
• build: fix build fail after make clean.
• mu: Fix unneeded size check in TPM2B unmarshaling.
• fapi: Fix missing parameter encryption.
• build: Fix failed build with --disable-vendor.
• fapi: Fix flush of persistent handles.
• fapi: Fix test provisioning with template with self generated certificate disabled.
• fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
• fapi: Revert pcr extension for EV_NO_ACTION events.
• fapi: Fix strange error messages if nv, ext, or policy path does not exits.
• fapi: Fix segfault caused by wrong allocation of pcr policy.
• esys: Fix leak in Esys_EvictControl for persistent handles.
• tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
• esys: Add reference counting for Esys_TR_FromTPMPublic.
• esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
• fapi: fix usage of self signed certificates in TPM.
• fapi: Usage of self signed certificates.
• fapi: A segfault after the error handling of non existing keys.
• fapi: Fix several leaks.
• fapi: Fix error handling for policy execution.
• fapi: Fix usage of persistent handles (should not be flushed)
• fapi: Fix test provisioning with template (skip test without self generated certificate).
• fapi: Fix pcr extension for EV_NO_ACTION
• test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
• tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
• fapi: Fix read large system eventlog (> UINT16_MAX).
• esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
• test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
• fapi: Fix possible null pointer dereferencing in Fapi_List.
• sys: Fix size check in Tss2_Sys_GetCapability.
• esys: Fix leak in Esys_TR_FromTPMPublic.
• esys: fix unchecked return value in esys crypto.
• fapi: Fix wrong usage of local variable in provisioning.
• fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
• fapi: Fix possible out of bound array access in IMA parser.
• tcti device: Fix possible unmarshalling from uninitialized variable.
• fapi: Fix error checking authorization of signing key.
• fapi: Fix cleanup of policy sessions.
• fapi: Eventlog H-CRTM events and different localities.
• fapi: Fix missing synchronization of quote and eventlog.
• faii: Fix invalid free in Fapi_Quote with empty eventlog.

Added

• tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
• mbedtls: add sha512 hmac.
• fapi: Enable usage of external keys for Fapi_Encrypt.
• fapi: Support download of AMD certificates.
• tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
• fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
• rc: New TPM return codes added.
• fapi: Further Nuvoton certificates added.
• tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
• tcti: Add '/dev/tcm0' to default conf
• fapi: New Nuvoton certificates added.
• esys: Fix leak in Esys_TR_FromTPMPublic.

Removed

• Testing on Ubuntu 18.04 as it's near EOL (May 2023).

4.0.2

Security

• Fixed CVE-2024-29040

Fixed

• fapi: Fix length check on FAPI auth callbacks
• fapi: Fix deviation from CEL specification.
• Makefile: Add tss2-tcti-swtpm.7.in to EXTRA_DIST to fix make clean.
• MU: Fix unneeded size check in TPM2B unmarshaling.
• fapi: Fix missing parameter encryption.
• build: Fix failed build with --disable-vendor
• fapi: Fix usage of persistent handles (should not be flushed)
• fapi: Fix test provisioning with template (skip test without self generated certificate).
• FAPI: Fix event logging for big endian machines.
• FAPI: Fix pcr extension for EV_NO_ACTION event.
• fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
• test: Fix usage of hashes in test cases.
• test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
• tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
• fapi: Fix read large system eventlog (> UINT16_MAX).
• fapi: Fix wrong allocation of pcr policy.
• esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
• test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
• esys: close TR handle for input persistent handle in EvictControl_Finish.
• Fix FormatStrings for non-32-bit platforms.
• esys: Add reference counting for Esys_TR_FromTPMPublic.
• fapi: Fix usage of wrong endorsement handle (TPM2_RH_EK).
• fapi: Fix authorization session handling.
• Makefile.am add missing flags UUID cand CRYPTO flags which caused problems during
  cross compilation.
• esys: remove trailing zeros in auth value
• aux_util: fix missing format specifier
• esys: fix unchecked return value in esys crypto.
• fapi: Fix possible null pointer dereferencing in Fapi_List.
• sys: Fix size check in Tss2_Sys_GetCapability.
• esys: Fix leak in Esys_TR_FromTPMPublic.
• fapi: Fix wrong usage of local variable in provisioning.
• fapi: fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
• fapi: Fix possible out of bound array access in IMA parser.
• tcti device: Fix possible unmarshalling from uninitialized variable.
• fapi: Fix error checking authorization of signing key.
• fapi: Fix cleanup of policy sessions.
• fapi: Eventlog H-CRTM events and different localities.
• fapi: Fix missing synchronization of quote and eventlog.
• faii: Fix invalid free in Fapi_Quote with empty eventlog.

3.2.3

Security

• Fixed CVE-2024-29040

Fixed

• fapi: Fix length check on FAPI auth callbacks
• build: fix build fail after make clean.
• tss2-rc: fix unknown layer handler dropping bits.
• fapi: Fix missing parameter encryption.
• fapi: Fix flush of persistent handles.
• build: Fix failed build with --disable-vendor.
• fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
• fapi: Fix strange error messages if nv, ext, or policy path does not exits.
• fapi: Fix segfault caused by wrong allocation of pcr policy.
• esys: Add reference counting for Esys_TR_FromTPMPublic.
• fapi: A segfault after the error handling of non existing keys.
• esys: Fix leak in Esys_EvictControl for persistent handles.
• fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
• fapi: Fix usage of persistent handles (should not be flushed)
• fapi: Fix read large system eventlog (> UINT16_MAX).
• esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0).
• test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
• esys: close TR handle for input persistent handle in EvictControl_Finish.
• Fix FormatStrings for non-32-bit platforms
• fapi: Fix usage of wrong endorsement handle (TPM2_RH_EK).
• fapi: Fix authorization session handling.
• fapi: Fix possible null pointer dereferencing in Fapi_List.
• sys: Fix size check in Tss2_Sys_GetCapability.
• esys: Fix leak in Esys_TR_FromTPMPublic.
• fapi: fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
• tcti device: Fix possible unmarshalling from uninitialized variable.

3.2.2

[3.2.2] - 2023-01-31

Fixed:

• A buffer overflow in tss2-rc as CVE-2023-22745.
• The drv layer in tss2-rc should have been the policy layer.
• Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string.
  This is API breaking but considered a bug since it deviated from the FAPI spec.
• FAPI: undefined reference to curl_url_strerror when using curl less than 7.80.0.

4.0.1

[4.0.1] - 2023-01-23

Fixed:

• A buffer overflow in tss2-rc as CVE-2023-22745.