SECURITY ANNOUNCEMENT
2 November 2026
trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the unseal error, causing key instantiation to succeed.
Return immediately when unseal fails to preserve the original error.
5.15.224 4876f09ce222e140a73aad950882b3605440c935
6.1.191 2d92a0f87c338a08367aff05edd1ade86da4ac8d
6.12.115 6e359d8cb8580b9874801dea930086effd4d9c62
6.18.60 e55d48f21f591a9fe80d26b5fbd1912ea725d9e6
6.6.161 234d09bb3b3d84851d4b3246272addc30f3353eb
