Linux · Security advisory · September 23, 2025

ELSA-2025-16428: libtpms security update

ELSA-2025-16428, released September 23, 2025, fixes 1 CVE in libtpms (version 0:0.9.6-11.el10_0). None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0019
8th percentile

Fixed package versions

ProductReleaseFixed in
libtpmsol 100:0.9.6-11.el10_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2025-49133 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue 5.9 0.0019 None reported
Showing 1 to 1 of 1 1