Advisories » MGASA-2025-0248

Updated libtpms package fixes security vulnerability

Publication date: 27 Oct 2025
Modification date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-49133

Description

It was discovered that libtpms had a potential out-of-bound access &
abort due to HMAC signing issue (CVE-2025-49133).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34396
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XITIPFJQFQIYBAV5Y3UA5AL6T5ATFDFX/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133

SRPMS

9/core

• libtpms-0.9.6-1.1.mga9