#1144810 swtpm: CVE-2026-75900

Package:
src:swtpm
Source:
src:swtpm
Submitter:
Salvatore Bonaccorso
Date:
2026-08-23 12:21:02 UTC
Severity:
normal
Tags:
#1144810#5
Date:
2026-08-19 05:55:34 UTC
From:
To:
Control: found -1 0.7.1-1.5

Hi,

The following vulnerability was published for swtpm.

CVE-2026-75900[0]:
| Fix length check in SWTPM_NVRAM_CheckHeader()

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-75900
https://www.cve.org/CVERecord?id=CVE-2026-75900
[1] https://github.com/stefanberger/swtpm/commit/afc9e512a0459b12776e8fa509cfa039908c6be6

Regards,
Salvatore
#1144810#14
Date:
2026-08-23 12:18:14 UTC
From:
To:
This upload fixes as well the reported #1144810 (CVE-2026-75900), but
the upload missed the bug closer. I'm doing manually.

Regards,
Salvatore