QA: * portlint: OK (looks fine.) * testport: OK (poudriere: 15.0, amd64 tested)
Created attachment 266945 [details] libtpms.patch
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=3557ca23680a41ba1dbab7c5662f67483a57334a commit 3557ca23680a41ba1dbab7c5662f67483a57334a Author: Goran Mekić <meka@tilda.center> AuthorDate: 2026-01-09 07:30:40 +0000 Commit: Vladimir Druzenko <vvd@FreeBSD.org> CommitDate: 2026-01-09 07:30:40 +0000 sysutils/libtpms: Update 0.10.1 => 0.10.2 Changelog: https://github.com/stefanberger/libtpms/releases/tag/v0.10.2 PR: 292279 sysutils/libtpms/Makefile | 3 ++- sysutils/libtpms/distinfo | 6 +++--- sysutils/libtpms/pkg-plist | 2 +- 3 files changed, 6 insertions(+), 5 deletions(-)
A commit in branch 2025Q4 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=e056c1fc5fbfac0d7cca5f93e92a9dfe72e5484e commit e056c1fc5fbfac0d7cca5f93e92a9dfe72e5484e Author: Goran Mekić <meka@tilda.center> AuthorDate: 2026-01-09 07:30:40 +0000 Commit: Vladimir Druzenko <vvd@FreeBSD.org> CommitDate: 2026-01-09 07:35:00 +0000 sysutils/libtpms: Update 0.10.1 => 0.10.2 Changelog: - tpm2: Fix memory leak by freeing KDF context - tpm2: Fix retrieval of updated IV when using OpenSSL >= 3.0 (CVE-2026-21444) https://github.com/stefanberger/libtpms/releases/tag/v0.10.2 PR: 292279 Security: CVE-2026-21444 (cherry picked from commit 3557ca23680a41ba1dbab7c5662f67483a57334a) sysutils/libtpms/Makefile | 3 ++- sysutils/libtpms/distinfo | 6 +++--- sysutils/libtpms/pkg-plist | 2 +- 3 files changed, 6 insertions(+), 5 deletions(-)
Thanks.