Every CVE Search/ Get API key

CVE-2025-49133

Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

5.9 MediumFix available

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.19%Up 0.2 points since Jun 11, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.9

Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
CVE-2025-49133
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2025-17819 5.9

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
EUVD-2025-17819
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
NVD 5.9

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
CVE-2025-49133
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2025-49133 5.5

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
ALPINE-CVE-2025-49133
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 5.9

Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
CVE-2025-49133
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2025-49133 5.5

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
DEBIAN-CVE-2025-49133
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 31 moreShow less
OSVOESA-2025-1836 5.9

libtpms security update

A library providing TPM functionality for VMs. Targeted for integration into Qemu.

Security Fix(es):

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.(CVE-2025-49133)

Record
OESA-2025-1836
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1837 5.9

libtpms security update

A library providing TPM functionality for VMs. Targeted for integration into Qemu.

Security Fix(es):

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.(CVE-2025-49133)

Record
OESA-2025-1837
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2133 5.9

libtpms security update

A library providing TPM functionality for VMs. Targeted for integration into Qemu.

Security Fix(es):

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.(CVE-2025-49133)

Record
OESA-2025-2133
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2134 5.9

libtpms security update

A library providing TPM functionality for VMs. Targeted for integration into Qemu.

Security Fix(es):

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.(CVE-2025-49133)

Record
OESA-2025-2134
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2135 5.9

libtpms security update

A library providing TPM functionality for VMs. Targeted for integration into Qemu.

Security Fix(es):

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.(CVE-2025-49133)

Record
OESA-2025-2135
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2261 5.9

libtpms security update

A library providing TPM functionality for VMs. Targeted for integration into Qemu.

Security Fix(es):

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.(CVE-2025-49133)

Record
OESA-2025-2261
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12100 5.9

Red Hat Security Advisory: libtpms security update

Record
RHSA-2025:12100
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12111 5.9

Red Hat Security Advisory: libtpms security update

Record
RHSA-2025:12111
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12112 5.9

Red Hat Security Advisory: libtpms security update

Record
RHSA-2025:12112
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12234 5.9

Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Record
RHSA-2025:12234
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12293 5.9

Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Record
RHSA-2025:12293
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12527 5.9

Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Record
RHSA-2025:12527
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:16428 5.9

Red Hat Security Advisory: libtpms security update

Record
RHSA-2025:16428
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:12100 5.9

Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

  • libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:12100
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:12527 5.9

Moderate: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:12527
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:16428 5.9

Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

  • libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:16428
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-49133 5.9

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
UBUNTU-CVE-2025-49133
CVSS 3.1
5.9 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:12100 No score

Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

  • libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:12100
Updated
2026-11-02
OSVALSA-2025:12527 No score

Moderate: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:12527
Updated
2026-11-02
OSVALSA-2025:16428 No score

Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

  • libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:16428
Updated
2026-11-02
OSVAZL-63702 No score

CVE-2025-49133 affecting package libtpms for versions less than 0.9.6-8

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.

Record
AZL-63702
Updated
2026-11-05
OSVMGASA-2025-0248 No score

Updated libtpms package fixes security vulnerability

It was discovered that libtpms had a potential out-of-bound access & abort due to HMAC signing issue (CVE-2025-49133).

Record
MGASA-2025-0248
Updated
2026-11-02
OSVopenSUSE-SU-2025:15244-1 No score

libtpms-devel-0.10.1-1.1 on GA media

These are all security issues fixed in the libtpms-devel-0.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15244-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20695-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).
  • CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling (bsc#1260439).
Record
openSUSE-SU-2026:20695-1
Updated
2026-11-02
OSVSUSE-SU-2026:1388-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528)
Record
SUSE-SU-2026:1388-1
Updated
2026-11-02
OSVSUSE-SU-2026:21035-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: out-of-bounds (OOB) access due to HMAC signing issue leads to abort and vTPM DoS (bsc#1244528).
Record
SUSE-SU-2026:21035-1
Updated
2026-11-02
OSVSUSE-SU-2026:21064-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: out-of-bounds (OOB) access due to HMAC signing issue leads to abort and vTPM DoS (bsc#1244528).
Record
SUSE-SU-2026:21064-1
Updated
2026-11-02
OSVSUSE-SU-2026:21571-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).
  • CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling (bsc#1260439).
Record
SUSE-SU-2026:21571-1
Updated
2026-11-02
OSVSUSE-SU-2026:21581-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).
  • CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling (bsc#1260439).
Record
SUSE-SU-2026:21581-1
Updated
2026-11-02
OSVSUSE-SU-2026:4278-1 No score

Security update for libtpms

This update for libtpms fixes the following issues:

  • CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads (bsc#1244528).
  • CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).
Record
SUSE-SU-2026:4278-1
Updated
2026-11-02
OSVUSN-7617-1 No score

libtpms vulnerability

It was discovered that libtpms did not properly manage memory when performing crafted cryptographic operations. An attacker could possibly use this issue to cause a denial of service.

Record
USN-7617-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtpms
Alpine:v3.19
 before 0.9.7-r0
0.9.7-r0
libtpms
Alpine:v3.20
 before 0.9.7-r0
0.9.7-r0
libtpms
Alpine:v3.22
 before 0.10.1-r0
0.10.1-r0
libtpms
Alpine:v3.23
 before 0.10.1-r0
0.10.1-r0
libtpms
Alpine:v3.24
 before 0.10.1-r0
0.10.1-r0
libtpms
AlmaLinux:9
 before 0.9.1-5.20211126git1ff6fe1f43.el9_6
0.9.1-5.20211126git1ff6fe1f43.el9_6
SLOF
AlmaLinux:8
 before 20210217-2.module_el8.10.0+3768+dfd76e10
20210217-2.module_el8.10.0+3768+dfd76e10
hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+2880+7d9e3703
1.3.18-23.module_el8.6.0+2880+7d9e3703
hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+3161+a07c0ea5
1.3.18-23.module_el8.6.0+3161+a07c0ea5
hivex-devel
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+2880+7d9e3703
1.3.18-23.module_el8.6.0+2880+7d9e3703
Show 290 moreShow less
Affected packages
PackageAffectedFixed
hivex-devel
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+3161+a07c0ea5
1.3.18-23.module_el8.6.0+3161+a07c0ea5
libguestfs
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-appliance
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-bash-completion
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-devel
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-gfs2
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-gobject
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-gobject-devel
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-inspect-icons
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-java
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-java-devel
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-javadoc
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-man-pages-ja
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-man-pages-uk
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-rescue
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-rsync
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-tools
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-tools-c
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libguestfs-winsupport
AlmaLinux:8
 before 8.10-1.module_el8.10.0+3768+dfd76e10
8.10-1.module_el8.10.0+3768+dfd76e10
libguestfs-xfs
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
libiscsi
AlmaLinux:8
 before 1.18.0-8.module_el8.6.0+2880+7d9e3703
1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi
AlmaLinux:8
 before 1.18.0-8.module_el8.6.0+3161+a07c0ea5
1.18.0-8.module_el8.6.0+3161+a07c0ea5
libiscsi-devel
AlmaLinux:8
 before 1.18.0-8.module_el8.6.0+2880+7d9e3703
1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-devel
AlmaLinux:8
 before 1.18.0-8.module_el8.6.0+3161+a07c0ea5
1.18.0-8.module_el8.6.0+3161+a07c0ea5
libiscsi-utils
AlmaLinux:8
 before 1.18.0-8.module_el8.6.0+2880+7d9e3703
1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utils
AlmaLinux:8
 before 1.18.0-8.module_el8.6.0+3161+a07c0ea5
1.18.0-8.module_el8.6.0+3161+a07c0ea5
libnbd
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
libnbd-bash-completion
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
libnbd-devel
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
libtpms
AlmaLinux:8
 before 0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654
0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654
libtpms-devel
AlmaLinux:8
 before 0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654
0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654
libvirt
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-client
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-config-network
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-config-nwfilter
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-interface
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-network
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-nodedev
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-nwfilter
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-qemu
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-secret
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-core
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-disk
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-gluster
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-iscsi
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-iscsi-direct
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-logical
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-mpath
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-rbd
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-driver-storage-scsi
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-daemon-kvm
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-dbus
AlmaLinux:8
 before 1.3.0-2.module_el8.6.0+2880+7d9e3703
1.3.0-2.module_el8.6.0+2880+7d9e3703
libvirt-dbus
AlmaLinux:8
 before 1.3.0-2.module_el8.6.0+3161+a07c0ea5
1.3.0-2.module_el8.6.0+3161+a07c0ea5
libvirt-devel
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-docs
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-libs
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-lock-sanlock
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-nss
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
libvirt-wireshark
AlmaLinux:8
 before 8.0.0-23.4.module_el8.10.0+4031+06966654
8.0.0-23.4.module_el8.10.0+4031+06966654
lua-guestfs
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
nbdfuse
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
nbdkit
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-bash-completion
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-basic-filters
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-basic-plugins
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-curl-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-devel
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-example-plugins
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-gzip-filter
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-gzip-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-linuxdisk-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-nbd-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-python-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-server
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-ssh-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-tar-filter
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-tar-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-tmpdisk-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-vddk-plugin
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
nbdkit-xz-filter
AlmaLinux:8
 before 1.24.0-5.module_el8.8.0+3485+7cffc4a3
1.24.0-5.module_el8.8.0+3485+7cffc4a3
netcf
AlmaLinux:8
 before 0.2.8-12.module_el8.6.0+2880+7d9e3703
0.2.8-12.module_el8.6.0+2880+7d9e3703
netcf
AlmaLinux:8
 before 0.2.8-12.module_el8.6.0+3161+a07c0ea5
0.2.8-12.module_el8.6.0+3161+a07c0ea5
netcf-devel
AlmaLinux:8
 before 0.2.8-12.module_el8.6.0+3161+a07c0ea5
0.2.8-12.module_el8.6.0+3161+a07c0ea5
netcf-devel
AlmaLinux:8
 before 0.2.8-12.module_el8.6.0+2880+7d9e3703
0.2.8-12.module_el8.6.0+2880+7d9e3703
netcf-libs
AlmaLinux:8
 before 0.2.8-12.module_el8.6.0+2880+7d9e3703
0.2.8-12.module_el8.6.0+2880+7d9e3703
netcf-libs
AlmaLinux:8
 before 0.2.8-12.module_el8.6.0+3161+a07c0ea5
0.2.8-12.module_el8.6.0+3161+a07c0ea5
ocaml-hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+2880+7d9e3703
1.3.18-23.module_el8.6.0+2880+7d9e3703
ocaml-hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+3161+a07c0ea5
1.3.18-23.module_el8.6.0+3161+a07c0ea5
ocaml-hivex-devel
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+2880+7d9e3703
1.3.18-23.module_el8.6.0+2880+7d9e3703
ocaml-hivex-devel
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+3161+a07c0ea5
1.3.18-23.module_el8.6.0+3161+a07c0ea5
ocaml-libguestfs
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
ocaml-libguestfs-devel
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
ocaml-libnbd
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
ocaml-libnbd-devel
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
perl-Sys-Guestfs
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
perl-Sys-Virt
AlmaLinux:8
 before 8.0.0-1.module_el8.6.0+2880+7d9e3703
8.0.0-1.module_el8.6.0+2880+7d9e3703
perl-Sys-Virt
AlmaLinux:8
 before 8.0.0-1.module_el8.6.0+3161+a07c0ea5
8.0.0-1.module_el8.6.0+3161+a07c0ea5
perl-hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+2880+7d9e3703
1.3.18-23.module_el8.6.0+2880+7d9e3703
perl-hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+3161+a07c0ea5
1.3.18-23.module_el8.6.0+3161+a07c0ea5
python3-hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+2880+7d9e3703
1.3.18-23.module_el8.6.0+2880+7d9e3703
python3-hivex
AlmaLinux:8
 before 1.3.18-23.module_el8.6.0+3161+a07c0ea5
1.3.18-23.module_el8.6.0+3161+a07c0ea5
python3-libguestfs
AlmaLinux:8
 before 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
python3-libnbd
AlmaLinux:8
 before 1.6.0-6.module_el8.10.0+3897+eb84924d
1.6.0-6.module_el8.10.0+3897+eb84924d
python3-libvirt
AlmaLinux:8
 before 8.0.0-2.module_el8.7.0+3346+68867adb
8.0.0-2.module_el8.7.0+3346+68867adb
qemu-guest-agent
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-img
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm-block-curl
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm-block-gluster
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm-block-iscsi
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm-block-rbd
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm-block-ssh
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
qemu-kvm-common
AlmaLinux:8
 before 15:6.2.0-53.module_el8.10.0+4031+06966654.4
15:6.2.0-53.module_el8.10.0+4031+06966654.4
libtpms
Azure Linux:3
 before 0.9.6-8
0.9.6-8
libtpms
Debian:12
 before 0.9.2-3.1+deb12u1, plus listed versions
0.9.2-3.1
0.9.2-3.1+deb12u1
libtpms
Debian:13
 before 0.9.2-3.2
0.9.2-3.2
libtpms
Debian:14
 before 0.9.2-3.2
0.9.2-3.2
libtpms
Mageia:9
 before 0.9.6-1.1.mga9
0.9.6-1.1.mga9
libtpms
openEuler:20.03-LTS-SP4
 before 0.7.3-9.oe2003sp4
0.7.3-9.oe2003sp4
libtpms
openEuler:22.03-LTS-SP4
 before 0.7.3-10.oe2203sp4
0.7.3-10.oe2203sp4
libtpms
openEuler:22.03-LTS-SP3
 before 0.7.3-10.oe2203sp3
0.7.3-10.oe2203sp3
libtpms
openEuler:24.03-LTS-SP1
 before 0.9.5-5.oe2403sp1
0.9.5-5.oe2403sp1
libtpms
openEuler:24.03-LTS-SP2
 before 0.9.5-5.oe2403sp2
0.9.5-5.oe2403sp2
libtpms
openEuler:24.03-LTS
 before 0.9.5-5.oe2403
0.9.5-5.oe2403
libtpms
Red Hat:enterprise_linux:9::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_6
0:0.9.1-5.20211126git1ff6fe1f43.el9_6
libtpms-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_6
0:0.9.1-5.20211126git1ff6fe1f43.el9_6
libtpms-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_6
0:0.9.1-5.20211126git1ff6fe1f43.el9_6
libtpms
Red Hat:rhel_eus:9.4::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_4
0:0.9.1-5.20211126git1ff6fe1f43.el9_4
libtpms-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_4
0:0.9.1-5.20211126git1ff6fe1f43.el9_4
libtpms-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_4
0:0.9.1-5.20211126git1ff6fe1f43.el9_4
libtpms
Red Hat:rhel_e4s:9.2::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_2
0:0.9.1-5.20211126git1ff6fe1f43.el9_2
libtpms-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_2
0:0.9.1-5.20211126git1ff6fe1f43.el9_2
libtpms-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_2
0:0.9.1-5.20211126git1ff6fe1f43.el9_2
hivex
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
hivex-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
hivex-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
hivex-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f
libguestfs
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-appliance
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-bash-completion
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-devel
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-gfs2
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-gobject
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-gobject-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-gobject-devel
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-inspect-icons
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-java
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-java-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-java-devel
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-javadoc
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-man-pages-ja
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-man-pages-uk
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-rescue
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-rsync
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-tools
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-tools-c
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-tools-c-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libguestfs-winsupport
Red Hat:rhel_aus:8.6::appstream
 before 0:8.6-2.module+el8.6.0+19818+47334628
0:8.6-2.module+el8.6.0+19818+47334628
libguestfs-xfs
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
libiscsi
Red Hat:rhel_aus:8.6::appstream
 before 0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
libiscsi-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
libiscsi-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
libiscsi-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
libiscsi-utils
Red Hat:rhel_aus:8.6::appstream
 before 0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
libiscsi-utils-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
0:1.18.0-8.module+el8.6.0+14480+c0a3aa0f
libnbd
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
libnbd-bash-completion
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
libnbd-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
libnbd-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
libnbd-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
libtpms
Red Hat:rhel_aus:8.6::appstream
 before 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
libtpms-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
libtpms-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
libtpms-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
0:0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55
libvirt
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-client
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-client-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-config-network
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-config-nwfilter
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-interface
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-interface-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-network
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-network-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-nodedev
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-nodedev-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-nwfilter
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-nwfilter-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-qemu
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-qemu-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-secret
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-secret-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-core
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-core-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-disk
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-disk-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-gluster
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-gluster-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-iscsi
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-iscsi-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-iscsi-direct
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-iscsi-direct-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-logical
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-logical-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-mpath
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-mpath-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-rbd
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-rbd-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-scsi
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-driver-storage-scsi-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-daemon-kvm
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-dbus
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.0-2.module+el8.6.0+14480+c0a3aa0f
0:1.3.0-2.module+el8.6.0+14480+c0a3aa0f
libvirt-dbus-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.0-2.module+el8.6.0+14480+c0a3aa0f
0:1.3.0-2.module+el8.6.0+14480+c0a3aa0f
libvirt-dbus-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.3.0-2.module+el8.6.0+14480+c0a3aa0f
0:1.3.0-2.module+el8.6.0+14480+c0a3aa0f
libvirt-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-docs
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-libs
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-libs-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-lock-sanlock
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-lock-sanlock-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-nss
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-nss-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-python
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-1.1.module+el8.6.0+16381+3abc475c
0:8.0.0-1.1.module+el8.6.0+16381+3abc475c
libvirt-python-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-1.1.module+el8.6.0+16381+3abc475c
0:8.0.0-1.1.module+el8.6.0+16381+3abc475c
libvirt-wireshark
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
libvirt-wireshark-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
0:8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3
lua-guestfs
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
lua-guestfs-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f
nbdfuse
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
nbdfuse-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
0:1.6.0-5.module+el8.6.0+14480+c0a3aa0f
nbdkit
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
nbdkit-bash-completion
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
nbdkit-basic-filters
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
nbdkit-basic-filters-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
nbdkit-basic-plugins
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
nbdkit-basic-plugins-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
nbdkit-curl-plugin
Red Hat:rhel_aus:8.6::appstream
 before 0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
0:1.24.0-4.module+el8.6.0+14480+c0a3aa0f
libtpms
Rocky Linux:9
 before 0:0.9.1-5.20211126git1ff6fe1f43.el9_6
0:0.9.1-5.20211126git1ff6fe1f43.el9_6
hivex
Rocky Linux:8
 before 0:1.3.18-23.module+el8.10.0+1835+43f01cbb
0:1.3.18-23.module+el8.10.0+1835+43f01cbb
hivex
Rocky Linux:8
 before 0:1.3.18-23.module+el8.10.0+1590+a67ab969
0:1.3.18-23.module+el8.10.0+1590+a67ab969
libguestfs
Rocky Linux:8
 before 1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky
1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky
libguestfs
Rocky Linux:8
 before 1:1.44.0-9.module+el8.10.0+1835+43f01cbb.rocky.rocky
1:1.44.0-9.module+el8.10.0+1835+43f01cbb.rocky.rocky
libguestfs-winsupport
Rocky Linux:8
 before 0:8.10-1.module+el8.10.0+1451+358d0d76
0:8.10-1.module+el8.10.0+1451+358d0d76
libguestfs-winsupport
Rocky Linux:8
 before 0:8.10-1.module+el8.10.0+1835+43f01cbb
0:8.10-1.module+el8.10.0+1835+43f01cbb
libiscsi
Rocky Linux:8
 before 0:1.18.0-8.module+el8.10.0+1835+43f01cbb
0:1.18.0-8.module+el8.10.0+1835+43f01cbb
libiscsi
Rocky Linux:8
 before 0:1.18.0-8.module+el8.10.0+1590+a67ab969
0:1.18.0-8.module+el8.10.0+1590+a67ab969
libnbd
Rocky Linux:8
 before 0:1.6.0-6.module+el8.10.0+1870+0a714c9f
0:1.6.0-6.module+el8.10.0+1870+0a714c9f
libtpms
Rocky Linux:8
 before 0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+2014+5ad6bca0
0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+2014+5ad6bca0
libvirt
Rocky Linux:8
 before 0:8.0.0-23.4.module+el8.10.0+2015+baffef50
0:8.0.0-23.4.module+el8.10.0+2015+baffef50
libvirt-dbus
Rocky Linux:8
 before 0:1.3.0-2.module+el8.10.0+1590+a67ab969
0:1.3.0-2.module+el8.10.0+1590+a67ab969
libvirt-dbus
Rocky Linux:8
 before 0:1.3.0-2.module+el8.10.0+1835+43f01cbb
0:1.3.0-2.module+el8.10.0+1835+43f01cbb
libvirt-python
Rocky Linux:8
 before 0:8.0.0-2.module+el8.10.0+1835+43f01cbb
0:8.0.0-2.module+el8.10.0+1835+43f01cbb
libvirt-python
Rocky Linux:8
 before 0:8.0.0-2.module+el8.10.0+1590+a67ab969
0:8.0.0-2.module+el8.10.0+1590+a67ab969
nbdkit
Rocky Linux:8
 before 0:1.24.0-5.module+el8.10.0+1835+43f01cbb
0:1.24.0-5.module+el8.10.0+1835+43f01cbb
nbdkit
Rocky Linux:8
 before 0:1.24.0-5.module+el8.10.0+1590+a67ab969
0:1.24.0-5.module+el8.10.0+1590+a67ab969
netcf
Rocky Linux:8
 before 0:0.2.8-12.module+el8.10.0+1835+43f01cbb
0:0.2.8-12.module+el8.10.0+1835+43f01cbb
netcf
Rocky Linux:8
 before 0:0.2.8-12.module+el8.10.0+1590+a67ab969
0:0.2.8-12.module+el8.10.0+1590+a67ab969
perl-Sys-Virt
Rocky Linux:8
 before 0:8.0.0-1.module+el8.10.0+1835+43f01cbb
0:8.0.0-1.module+el8.10.0+1835+43f01cbb
perl-Sys-Virt
Rocky Linux:8
 before 0:8.0.0-1.module+el8.10.0+1590+a67ab969
0:8.0.0-1.module+el8.10.0+1590+a67ab969
qemu-kvm
Rocky Linux:8
 before 5:6.2.0-53.module+el8.10.0+1882+0c885e98.2
5:6.2.0-53.module+el8.10.0+1882+0c885e98.2
qemu-kvm
Rocky Linux:8
 before 5:6.2.0-53.module+el8.10.0+1870+0a714c9f
5:6.2.0-53.module+el8.10.0+1870+0a714c9f
qemu-kvm
Rocky Linux:8
 before 5:6.2.0-53.module+el8.10.0+2055+8eb7870b.4
5:6.2.0-53.module+el8.10.0+2055+8eb7870b.4
seabios
Rocky Linux:8
 before 0:1.16.0-4.module+el8.9.0+1408+7b966129
0:1.16.0-4.module+el8.9.0+1408+7b966129
sgabios
Rocky Linux:8
 before 1:0.20170427git-3.module+el8.10.0+1590+a67ab969
1:0.20170427git-3.module+el8.10.0+1590+a67ab969
sgabios
Rocky Linux:8
 before 1:0.20170427git-3.module+el8.10.0+1835+43f01cbb
1:0.20170427git-3.module+el8.10.0+1835+43f01cbb
supermin
Rocky Linux:8
 before 0:5.2.1-2.module+el8.10.0+1590+a67ab969
0:5.2.1-2.module+el8.10.0+1590+a67ab969
supermin
Rocky Linux:8
 before 0:5.2.1-2.module+el8.10.0+1835+43f01cbb
0:5.2.1-2.module+el8.10.0+1835+43f01cbb
swtpm
Rocky Linux:8
 before 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969
0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969
swtpm
Rocky Linux:8
 before 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1835+43f01cbb
0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1835+43f01cbb
virt-v2v
Rocky Linux:8
 before 1:1.42.0-22.module+el8.10.0+1590+a67ab969
1:1.42.0-22.module+el8.10.0+1590+a67ab969
virt-v2v
Rocky Linux:8
 before 1:1.42.0-22.module+el8.10.0+1835+43f01cbb
1:1.42.0-22.module+el8.10.0+1835+43f01cbb
libtpms
Rocky Linux:10
 before 0:0.9.6-11.el10_0
0:0.9.6-11.el10_0
libtpms
SUSE:Linux Enterprise Module for Server Applications 15 SP7
 before 0.9.6-150600.3.3.1
0.9.6-150600.3.3.1
libtpms
openSUSE:Leap 15.6
 before 0.9.6-150600.3.3.1
0.9.6-150600.3.3.1
libtpms
SUSE:Linux Micro 6.1
 before 0.9.6-slfo.1.1_2.1
0.9.6-slfo.1.1_2.1
libtpms
SUSE:Linux Micro 6.0
 before 0.9.6-2.1
0.9.6-2.1
libtpms
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 0.8.2-150300.3.12.1
0.8.2-150300.3.12.1
libtpms
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 0.8.2-150300.3.12.1
0.8.2-150300.3.12.1
libtpms
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 0.8.2-150300.3.12.1
0.8.2-150300.3.12.1
libtpms
Ubuntu:22.04:LTS
 before 0.9.3-0ubuntu1.22.04.2, plus listed versions
0.8.2-1ubuntu10.9.0-0ubuntu10.9.0-0ubuntu20.9.0-0ubuntu30.9.0-0ubuntu40.9.3-0ubuntu10.9.3-0ubuntu1.22.04.1
0.9.3-0ubuntu1.22.04.2
libtpms
Ubuntu:24.04:LTS
 before 0.9.3-0ubuntu4.24.04.1, plus listed versions
0.9.3-0ubuntu20.9.3-0ubuntu30.9.3-0ubuntu4
0.9.3-0ubuntu4.24.04.1
libtpms
openSUSE:Tumbleweed
 before 0.10.1-1.1
0.10.1-1.1

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-49133 is a medium vulnerability (CVSS 5.9) in Libtpms Project Libtpms, published June 10, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in libtpms 0.9.7-r0.

References

Show 51 moreShow less
This page doesn't list everything

Left out here: 1,216 package rows. The JSON record has them. Also not on the record: 117 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open