- Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - Type:requirement - CVE:NA - SUG:restart - DESC:bugs fix of pxe and admin-container - Type:requirement - CVE:NA - SUG:restart - DESC:enforce non-empty strings for required fields - Type:requirement - CVE:NA - SUG:restart - DESC:enforce non-empty vec strings for required fields - Type:requirement - CVE:NA - SUG:restart - DESC:set default umask to 022 for KubeOS image creation - Type:requirement - CVE:NA - SUG:restart - DESC:add KubeOS image creation docs with ignition and fstab support - Type:requirement - CVE:NA - SUG:restart - DESC:modify file permissions - Type:requirement - CVE:NA - SUG:restart - DESC:Fix the issue of probabilistic mounting failure in fstab - Type:requirement - CVE:NA - SUG:restart - DESC:add cve-tools to KubeOS-scripts - Type:requirement - CVE:NA - SUG:restart - DESC:add security-tools to KubeOS-scripts - Type:requirement - CVE:NA - SUG:restart - DESC:fix kbimg add selinux - Type:requirement - CVE:NA - SUG:restart - DESC:bugs fix of pxe and admin-container - Type:requirement - CVE:NA - SUG:restart - DESC:enforce non-empty strings for required fields - Type:requirement - CVE:NA - SUG:restart - DESC:enforce non-empty vec strings for required fields - Type:requirement - CVE:NA - SUG:restart - DESC:set default umask to 022 for KubeOS image creation - Type:requirement - CVE:NA - SUG:restart - DESC:add KubeOS image creation docs with ignition and fstab support - Type:requirement - CVE:NA - SUG:restart - DESC:modify file permissions - Type:requirement - CVE:NA - SUG:restart - DESC:Fix the issue of probabilistic mounting failure in fstab - Type:requirement - CVE:NA - SUG:restart - DESC:add cve-tools to KubeOS-scripts - Type:requirement - CVE:NA - SUG:restart - DESC:add security-tools to KubeOS-scripts - Type:requirement - CVE:NA - SUG:restart - DESC:fix kbimg add selinux - Type:requirement - CVE:NA - SUG:restart - DESC:bugs fix of pxe and admin-container - Type:requirement - CVE:NA - SUG:restart - DESC:enforce non-empty strings for required fields - Type:requirement - CVE:NA - SUG:restart - DESC:enforce non-empty vec strings for required fields - Type:requirement - CVE:NA - SUG:restart - DESC:set default umask to 022 for KubeOS image creation - Type:requirement - CVE:NA - SUG:restart - DESC:add KubeOS image creation docs with ignition and fstab support - Type:requirement - CVE:NA - SUG:restart - DESC:modify file permissions - Type:requirement - CVE:NA - SUG:restart - DESC:Fix the issue of probabilistic mounting failure in fstab - Type:requirement - CVE:NA - SUG:restart - DESC:add cve-tools to KubeOS-scripts - Type:requirement - CVE:NA - SUG:restart - DESC:add security-tools to KubeOS-scripts - Type:requirement - CVE:NA - SUG:restart - DESC:fix kbimg add selinux - Type: requirement - CVE: NA - SUG: restart - DESC: package init - Type: requirement - CVE: NA - SUG: restart - DESC: add patch directory - Type: bugfix - CVE: NA - SUG: restart - DESC: patch structure init, sync upstream patches - Type: bugfix - CVE: NA - SUG: restart - DESC: strip wasm_engine binary - Type: bugfix - CVE: NA - SUG: restart - DESC: update the wasmtime version to v18.0.1 - Type: bugfix - CVE: NA - SUG: restart - DESC: fix build problem with obs - Type: requirement - CVE: NA - SUG: restart - DESC: package init - Type: requirement - CVE: NA - SUG: restart - DESC: add patch directory - Type: bugfix - CVE: NA - SUG: restart - DESC: patch structure init, sync upstream patches - Type: bugfix - CVE: NA - SUG: restart - DESC: strip wasm_engine binary - Type: bugfix - CVE: NA - SUG: restart - DESC: update the wasmtime version to v18.0.1 - Type: bugfix - CVE: NA - SUG: restart - DESC: fix build problem with obs - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - Upgrade to 0.103.11 - Upgrade to 0.103.12 - Update to 1.0.9 for fix CVE-2025-20260 - Fix clamav downgrade failure - Fix compile failure on loongarch by updating vendor - add headers and scripts for multilib - Fix compile failure on sw_64 by updating vendor - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - disable User/Group on hongmeng - enable subtree_control for sub cgroup on hongmeng - update version to 1.0.0 - sync patches from upstream - resolve wantedby invalid and fix reboot symlink not correct after reinstall - read pid cmdline incorrect - resolve not mounted home - sync patches from upstream - sync patches from upstream - update version to 1.1.0 - disable User/Group on hongmeng - enable subtree_control for sub cgroup on hongmeng - update version to 1.0.0 - sync patches from upstream - resolve wantedby invalid and fix reboot symlink not correct after reinstall - read pid cmdline incorrect - resolve not mounted home - sync patches from upstream - sync patches from upstream - update version to 1.1.0 - BuildRequires(cargo) add version constraint - update to 140.6.0 - update to 140.7.0 * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891 - update to 140.8.0 - update to 140.9.0 - update to 140.9.1 * fix CVE-2026-5731, CVE-2026-5732, CVE-2026-5734 - update to 140.10.0 - update to 140.10.1 * fix CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323 - update to 140.10.2 * fix CVE-2026-8090, CVE-2026-8091, CVE-2026-8092, CVE-2026-8094 - update to 140.11.0 - BuildRequires(cargo) add version constraint - update to 140.6.0 - update to 140.7.0 * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891 - update to 140.8.0 - update to 140.9.0 - update to 140.9.1 * fix CVE-2026-5731, CVE-2026-5732, CVE-2026-5734 - update to 140.10.0 - update to 140.10.1 * fix CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323 - update to 140.10.2 * fix CVE-2026-8090, CVE-2026-8091, CVE-2026-8092, CVE-2026-8094 - update to 140.11.0 - BuildRequires(cargo) add version constraint - update to 140.6.0 - update to 140.7.0 * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891 - update to 140.8.0 - update to 140.9.0 - update to 140.9.1 * fix CVE-2026-5731, CVE-2026-5732, CVE-2026-5734 - update to 140.10.0 - update to 140.10.1 * fix CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323 - update to 140.10.2 * fix CVE-2026-8090, CVE-2026-8091, CVE-2026-8092, CVE-2026-8094 - update to 140.11.0 - BuildRequires(cargo) add version constraint - update to 140.6.0 - update to 140.7.0 * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891 - update to 140.8.0 - update to 140.9.0 - update to 140.9.1 * fix CVE-2026-5731, CVE-2026-5732, CVE-2026-5734 - update to 140.10.0 - update to 140.10.1 * fix CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323 - update to 140.10.2 * fix CVE-2026-8090, CVE-2026-8091, CVE-2026-8092, CVE-2026-8094 - update to 140.11.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - fix: Add a cargo.lock file to lock dependency versions. - fix:[plugin manager] replace unwrap with results - fix:[policy engine] forbid custom functions and loop with number range - fix: Add libboundscheck library for building RPM agent and cli. - fix:[policy engine] forbid custom functions and loop with number range - feat: Modify the URL paths in the API documentation - feat: Add a default value for executables_value in the tpm_boot.rego file. - fix:fix key managerd workers - feat: add compilation options for security requirements - fix: [attestation server] fix unwrap problem in initialization process - fix: strengthen the policy injection proctection - fix: delete tests that are commented out - fix: [endorsement] fix unwrap problem - fix: add more strict parameter validation for user id - feat:modify register white box inspection - fix:fix apikey block_on - Merge openeuler/master: resolve conflicts and integrate upstream changes - perf: optimize PCR index validation - config: update PCR banks config for batch processing - test: add test cases for TPM plugin improvements - fix:fix apikey block_on - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems. - fix: optimize TPM NV reading and PCR collection - fix:add tpm.rego,modify ut and agent_config - feat: fix log name - Revert "bugfix: add key_managerd.service to rpm" - bugfix: add key_managerd.service to rpm - feat: Adapting to the log of ascend npu - fix:fix server_config - feat: The virtCCA plugin supports log collection and verification in the dim format - feat:add TpmPlugin for attester and verfier dim_log - fix: cancel exporting unnecessary lib. - fix: clear magic number in CCA plugin. - fix: split the verify_logs func in CCA verifier. - fix: add UT for CCA verifier plugin. - fix: Optimize command-line options and their explanations - feat: update docs and RPM spec files for CCA. - feat: add CCA verifier plugin. - feat: Modify the input of the all policy to the output of the plugin. - feat: Modify the interface documentation - feat: The baseline generation tool supports dim baseline generation. - feat: Added all-type policy - feat: add CCA attester plugin. - fix: extract public log verify code. - fix:Fix failure to read IAK certificate - fix: Adapt to EAR token format for itrustee plugin. - fix: Adding the secure boot field to the token in the virtCCA plugin - fix: Remove unnecessary fields in itrustee.rego. - fix: Add public key information and display the realm challenge when no platform token exists. - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: # conflict attestation_server/policy/src/services/policy_service.rs - fix: Add JWT signature verification when updating the policy - feat: Add platform token challenge field and refine software component serialization - fix: Modify the translated content of the document - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events. - fix: Modified failed test cases - Merge remote-tracking branch 'origin/issue' into issue - fix: Capitalize the first letter of error messages - fix: Modify error messages to reduce module exceptions printed to the interface output. - fix: Add codecheck build script - fix: Modify error messages to reduce module exceptions printed to the interface output. - bugfix: add a chapter for readme - fix: add UT - feat(api): configure server limits and improve error handling - fix: Fixing some errors in the API documentation - fix: declare dependency for ITrustee. - fix: add copyright notice. - test:add tpm and virtcca UT - fix: update descriptions of request params. - fix: fixes OpenSSL affected by CVE-2025-15467. - feat: add ascend_npu cbor data to policy - feat: Add the user policy for the TPM plugin - fix:fix bug and UT - fix: modify token structure of CCA and virtCCA. - fix: remove mock cca_sdk from spec file. - fix: update CCA token obtain and verify. - Revert "feat: Added Compatibility Plugin" - Revert "feat: Add logic for the main plugin to retrieve information for each plugin." - feat: Added token verification interface, supporting custom public key input. - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: update rustup source in code-check script. - fix: replace default rustup source in code-check script. - Merge remote-tracking branch 'upstream/master' into plugin - feat: add UT to key_manager - feat: Added Compatibility Plugin - fix: Change the IP addresses in the document - fix: specify REM indexes when replaying boot log. - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint - feat: Add logic for the main plugin to retrieve information for each plugin. - fix: address review comments - feat: add cca server unit tests - feat: remove obsolete CLI unit tests - feat: Add log data validation - feat: add unit test to endorserment, key and resource_provider - feat: expand client, validate, load_plugins, and error coverage - feat: add challenge and evidence verification handler coverage - feat: expand service, entities, utils, and signature update coverage - feat: add event log, parser, and serializer coverage - feat: add api-sub-key func - fix: move LICENSE to root directory. - fix: remove communication matrix in guide. - fix: add docs to tpm plugin - feat: delete Chinese for key_manager - feat: add UT to attestation_server - feat: add UT to attestation_common - feat: add UT to attestation_cli - Merge remote-tracking branch 'refs/remotes/origin/master' - Merge remote-tracking branch 'refs/remotes/origin/master' - add UT to attestation_agent - feat: add attestation_client facade crate - refactor: move func process_nonce to NonceUtil - refactor: unify ascend npu evidence handling around base64 cbor - fix: Edit the cargo.toml file - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time. - Merge remote: openeuler/global-trust-authority master - fix: DICE verification configuration update - fix: move dependencies of cca to workspace level - feat: Added a new DICE verifier module - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management - feat: Added DICE authentication module and adapted CLI tool - docs: fix typo ITrustee to itrustee in attestation_service.md - feat: add is_default field to ref_value API documentation - fix: Fix and refine attestation codebase and documentation - fix: Make the rate limiting for the agent service configurable - feat: Declare the dependencies of the policy_engine module separately - fix(agent): handle non-2xx HTTP responses to surface real error causes - fix: add restful configuration in attestation client - refactor(ref_value): remove redundant validate func - fix(docs): add cca type for ref_value and modify content size - test(attestation): add UTs for dice verifier and token - fix: modify dice uts - Merge atomgit/master into current branch - feat: Add documentation for dice plugin and support SM2 algorithm for token - test(attestation): add UTs for dice attester and verifier - perf: use AtomicBool for initialization check - fix: Modify the fields in the token so that the fields related to the log status become Boolean values - fix: Change the data type of the secureBoot field to boolean - fix: Remove the “ignore” field from all ref_value_match_status entries - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p” - Upgrade to 42.0 - Add gnome-tour.yaml - Update to 43.0 - Enable debuginfo for fix strip - update to version 44.0 - Upgrade to 42.0 - Add gnome-tour.yaml - Update to 43.0 - Enable debuginfo for fix strip - update to version 44.0 - Upgrade to 42.0 - Add gnome-tour.yaml - Update to 43.0 - Enable debuginfo for fix strip - update to version 44.0 - Upgrade to 42.0 - Add gnome-tour.yaml - Update to 43.0 - Enable debuginfo for fix strip - update to version 44.0 - fixes failed: with rust-1.78.0, ignore invalid_doc_attributes, to enable build success. - fixes failed: with rust-1.78.0, ignore invalid_doc_attributes, to enable build success. - fixes failed: with rust-1.78.0, ignore invalid_doc_attributes, to enable build success. - fixes failed: with rust-1.78.0, ignore invalid_doc_attributes, to enable build success. - Initial RPM release - Update to 0.0.2, add support for sandbox API - Fix concurrency issue when calling sandbox API - Initial RPM release - Update to 0.0.2, add support for sandbox API - Fix concurrency issue when calling sandbox API - Initial RPM release - Update to 0.0.2, add support for sandbox API - Fix concurrency issue when calling sandbox API - Type:bugfix - ID:NA - SUG:NA - DESC:fix the problem of missing kata-containers source code in the src package - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2025-65637 - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2026-24054 - Type:enhancement - ID:NA - SUG:NA - DESC:rebuild for the golang version with the CVE fixed - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2026-33186 - Type:bugfix - ID:NA - SUG:NA - DESC:add the conflict with kata-containers-go - Type:bugfix - ID:NA - SUG:NA - DESC:modify the git clone download address in kata_integration_clone - Type:bugfix - ID:NA - SUG:NA - DESC:fix the problem of self-compilation failure in the kata-containers source package - Type:enhancement - ID:NA - SUG:NA - DESC:bump version for using golang update for bugfix - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2026-47243 - Type:bugfix - ID:NA - SUG:NA - DESC:fix the problem of missing kata-containers source code in the src package - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2025-65637 - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2026-24054 - Type:enhancement - ID:NA - SUG:NA - DESC:rebuild for the golang version with the CVE fixed - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2026-33186 - Type:bugfix - ID:NA - SUG:NA - DESC:add the conflict with kata-containers-go - Type:bugfix - ID:NA - SUG:NA - DESC:modify the git clone download address in kata_integration_clone - Type:bugfix - ID:NA - SUG:NA - DESC:fix the problem of self-compilation failure in the kata-containers source package - Type:enhancement - ID:NA - SUG:NA - DESC:bump version for using golang update for bugfix - Type:CVE - ID:NA - SUG:NA - DESC:fix CVE-2026-47243 - Type:Enhancement - ID:NA - SUG:NA - DESC: Simplify Store api, remove unnecessary validation Check if a path is abstract before connection Add vsock support. - fix build error on loongarch64 - Type:NA - ID:NA - SUG:NA - DESC: sync some patches - Type:Fix - ID:NA - SUG:NA - DESC: riscv64: restore nix-0.16.1 patch - Type:Fix - ID:NA - SUG:NA - DESC:just use vendor on loongarch64 add loongarch64 support for nix - Type:Enhancement - ID:NA - SUG:NA - DESC: Simplify Store api, remove unnecessary validation Check if a path is abstract before connection Add vsock support. - fix build error on loongarch64 - Type:NA - ID:NA - SUG:NA - DESC: sync some patches - Type:Fix - ID:NA - SUG:NA - DESC: riscv64: restore nix-0.16.1 patch - Type:Fix - ID:NA - SUG:NA - DESC:just use vendor on loongarch64 add loongarch64 support for nix - Type:Enhancement - ID:NA - SUG:NA - DESC: Simplify Store api, remove unnecessary validation Check if a path is abstract before connection Add vsock support. - fix build error on loongarch64 - Type:NA - ID:NA - SUG:NA - DESC: sync some patches - Type:Fix - ID:NA - SUG:NA - DESC: riscv64: restore nix-0.16.1 patch - Type:Fix - ID:NA - SUG:NA - DESC:just use vendor on loongarch64 add loongarch64 support for nix - fix build error for loongarch64 - Disable mold for riscv64 - Fix CVE-2023-44488.patch - Fix CVE-2023-6209 - enable debug package - add sw_64 support - fix build with icu 76 - set CC and CXX so that clang won't be selected automatically - fix compilation errors in sw_64 support - fix build error for loongarch64 - Disable mold for riscv64 - Fix CVE-2023-44488.patch - Fix CVE-2023-6209 - enable debug package - add sw_64 support - fix build with icu 76 - set CC and CXX so that clang won't be selected automatically - fix compilation errors in sw_64 support - fix build error for loongarch64 - Disable mold for riscv64 - Fix CVE-2023-44488.patch - Fix CVE-2023-6209 - enable debug package - add sw_64 support - fix build with icu 76 - set CC and CXX so that clang won't be selected automatically - fix compilation errors in sw_64 support - fix build error for loongarch64 - Disable mold for riscv64 - Fix CVE-2023-44488.patch - Fix CVE-2023-6209 - enable debug package - add sw_64 support - fix build with icu 76 - set CC and CXX so that clang won't be selected automatically - fix compilation errors in sw_64 support - fix build error for loongarch64 - Disable mold for riscv64 - Fix CVE-2023-44488.patch - Fix CVE-2023-6209 - enable debug package - add sw_64 support - fix build with icu 76 - set CC and CXX so that clang won't be selected automatically - fix compilation errors in sw_64 support - Init Package - Upgrade to 1.5.0 - Upgrade to 1.10.3 - Upgrade to 1.11.0 - Init Package - Upgrade to 1.5.0 - Upgrade to 1.10.3 - Upgrade to 1.11.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - Type:CVE - ID:CVE-2024-32002 - SUG:NA - DESC:Fix CVE-2024-32002 - Type:CVE - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - SUG:NA - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465 - Type:CVE - ID:CVE-2024-50349 CVE-2024-52006 - SUG:NA - DESC:Fix CVE-2024-50349 CVE-2024-52006 - Type:CVE - ID:CVE-2024-52005 - SUG:NA - DESC:Fix CVE-2024-52005 - Type:CVE - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - SUG:NA - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 - Type:bugfix - ID:NA - SUG:NA - DESC:fix malformed patch: backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch - Type:CVE - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - SUG:NA - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835 - Type:bugfix - ID:NA - SUG:NA - DESC:backport upstream patch config.mak.uname: set CSPRNG_METHOD to getrandom on Linux - Type:CVE - ID:CVE-2025-66413 - SUG:NA - DESC:Fix CVE-2025-66413 - update to 2.54.0 - set debug is true for build debug package - add rust to BuildRequires - enable check - add sw_64 support - Revert bound openssl symbols to support sm2 for python - add EVP_PKEY_keygen_init and EVP_PKEY_keygen - disable RSA PKCS#1v1.5 padding to fix CVE-2023-50782 - fix CVE-2026-26007 - set debug is true for build debug package - add rust to BuildRequires - enable check - add sw_64 support - Revert bound openssl symbols to support sm2 for python - add EVP_PKEY_keygen_init and EVP_PKEY_keygen - disable RSA PKCS#1v1.5 padding to fix CVE-2023-50782 - fix CVE-2026-26007 - set debug is true for build debug package - add rust to BuildRequires - enable check - add sw_64 support - Revert bound openssl symbols to support sm2 for python - add EVP_PKEY_keygen_init and EVP_PKEY_keygen - disable RSA PKCS#1v1.5 padding to fix CVE-2023-50782 - fix CVE-2026-26007 - set debug is true for build debug package - add rust to BuildRequires - enable check - add sw_64 support - Revert bound openssl symbols to support sm2 for python - add EVP_PKEY_keygen_init and EVP_PKEY_keygen - disable RSA PKCS#1v1.5 padding to fix CVE-2023-50782 - fix CVE-2026-26007 - Package Spec generated - Package Spec generated - Package Spec generated - Package Spec generated - Package Spec generated - Package Spec generated - set debug is true for build debug package - add rust to BuildRequires - enable check - add sw_64 support - Revert bound openssl symbols to support sm2 for python - add EVP_PKEY_keygen_init and EVP_PKEY_keygen - disable RSA PKCS#1v1.5 padding to fix CVE-2023-50782 - fix CVE-2026-26007 - Package Spec generated - Update to 3.1.1 * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199 * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6241 - Add support for CRYPT-YESCRYPT #6242 * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219 * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 * Issue 6155 - ldap-agent fails to start because of permission error #6179 * Issue 6170 - audit log buffering doesn’t handle large updates * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208 * Issue 6199 - unprotected search query during certificate based authentication #6205 * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 * Issue 6229 - After an initial failure, subsequent online backups fail #6230 * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches #6266 * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1 - fix name cockpit_present is not defined. - Fix dsidm role subtree-status fails with TypeError - Fix typo sucessfully - Fix CVE-2025-24898 - Fix CVE-2025-2487 - fix build with rust 1.89 - Fix CVE-2025-14905 - fix build error for three-eight-nine-ds-base - Fix CVE-2026-9064 - do not strip binaries, as it is required for debugsource generating - use config.toml rather than config for projects - revert config.toml change as there are too many downstream packages affected - bump epoch so that it won't be obsoleted by wrongly imported packages - Fix duplicate rpm names to update release 5 - Package Spec generated - add fix-compose-err.patch - Fix has_modules_enable() check - Update rpm-ostree to 2022.16. - enable riscv64 architecture - fix compose error for selinux. - add-for-support-NestOS-kernel. - merge feature from branch openEuler-22.03-LTS-SP1： - DESC: add loongarch64 and sw_64 support - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn> - update to 2023.7 - Synchronize upstream spec file modifications - Fix CVE-2024-2905 - Update to 2024.4 - Fix missing patch in source code package - add fix-compose-err.patch - Fix has_modules_enable() check - Update rpm-ostree to 2022.16. - enable riscv64 architecture - fix compose error for selinux. - add-for-support-NestOS-kernel. - merge feature from branch openEuler-22.03-LTS-SP1： - DESC: add loongarch64 and sw_64 support - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn> - update to 2023.7 - Synchronize upstream spec file modifications - Fix CVE-2024-2905 - Update to 2024.4 - Fix missing patch in source code package - add fix-compose-err.patch - Fix has_modules_enable() check - Update rpm-ostree to 2022.16. - enable riscv64 architecture - fix compose error for selinux. - add-for-support-NestOS-kernel. - merge feature from branch openEuler-22.03-LTS-SP1： - DESC: add loongarch64 and sw_64 support - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn> - update to 2023.7 - Synchronize upstream spec file modifications - Fix CVE-2024-2905 - Update to 2024.4 - Fix missing patch in source code package - add fix-compose-err.patch - Fix has_modules_enable() check - Update rpm-ostree to 2022.16. - enable riscv64 architecture - fix compose error for selinux. - add-for-support-NestOS-kernel. - merge feature from branch openEuler-22.03-LTS-SP1： - DESC: add loongarch64 and sw_64 support - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn> - update to 2023.7 - Synchronize upstream spec file modifications - Fix CVE-2024-2905 - Update to 2024.4 - Fix missing patch in source code package - add fix-compose-err.patch - Fix has_modules_enable() check - Update rpm-ostree to 2022.16. - enable riscv64 architecture - fix compose error for selinux. - add-for-support-NestOS-kernel. - merge feature from branch openEuler-22.03-LTS-SP1： - DESC: add loongarch64 and sw_64 support - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn> - update to 2023.7 - Synchronize upstream spec file modifications - Fix CVE-2024-2905 - Update to 2024.4 - Fix missing patch in source code package - add fix-compose-err.patch - Fix has_modules_enable() check - Update rpm-ostree to 2022.16. - enable riscv64 architecture - fix compose error for selinux. - add-for-support-NestOS-kernel. - merge feature from branch openEuler-22.03-LTS-SP1： - DESC: add loongarch64 and sw_64 support - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn> - update to 2023.7 - Synchronize upstream spec file modifications - Fix CVE-2024-2905 - Update to 2024.4 - Fix missing patch in source code package - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update package to v0.26.0 - Upgrade to 0.27.0 - update to 0.29.2 - update package to v0.26.0 - Upgrade to 0.27.0 - update to 0.29.2 - update package to v0.26.0 - Upgrade to 0.27.0 - update to 0.29.2 - update package to v0.26.0 - Upgrade to 0.27.0 - update to 0.29.2 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - do not strip binaries, as it is required for debugsource generating - use config.toml rather than config for projects - revert config.toml change as there are too many downstream packages affected - bump epoch so that it won't be obsoleted by wrongly imported packages - Fix duplicate rpm names to update release 5 - do not strip binaries, as it is required for debugsource generating - use config.toml rather than config for projects - revert config.toml change as there are too many downstream packages affected - bump epoch so that it won't be obsoleted by wrongly imported packages - Fix duplicate rpm names to update release 5 - Init package at 14.1.0 - Init package at 14.1.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - update to 1.91.0 - Fix syntax error for rust - update to 1.91.1 - update to 1.92.0 - Update to 1.93.1 - Update to 1.94.0 - Enable bundled_llvm for loongarch64 - Update to 1.94.1 - Update to 1.95.0 - Update to 1.96.0 - set debug is true for build debug package - add rust to BuildRequires - Micro fix the ioctl allow for aarch64 - bugfix VM run failed from memory snapshot - Fix setting core reg error when restoring VM. - Update ioctl allow list. - Introduce riscv64 architecture support - vfio-pci: fix a deadlock problem - bugfix the error in the return result of query_commands - add QMP query-cpus-fast - add support to interconnect with libvirt - Do not delete fd which has not been added - Rework patch 9/10 as patch 12/13. - Adjust spec file to apply them for riscv64. - set debug is true for build debug package - add rust to BuildRequires - Micro fix the ioctl allow for aarch64 - bugfix VM run failed from memory snapshot - Fix setting core reg error when restoring VM. - Update ioctl allow list. - Introduce riscv64 architecture support - vfio-pci: fix a deadlock problem - bugfix the error in the return result of query_commands - add QMP query-cpus-fast - add support to interconnect with libvirt - Do not delete fd which has not been added - Rework patch 9/10 as patch 12/13. - Adjust spec file to apply them for riscv64. - set debug is true for build debug package - add rust to BuildRequires - Micro fix the ioctl allow for aarch64 - bugfix VM run failed from memory snapshot - Fix setting core reg error when restoring VM. - Update ioctl allow list. - Introduce riscv64 architecture support - vfio-pci: fix a deadlock problem - bugfix the error in the return result of query_commands - add QMP query-cpus-fast - add support to interconnect with libvirt - Do not delete fd which has not been added - Rework patch 9/10 as patch 12/13. - Adjust spec file to apply them for riscv64. - set debug is true for build debug package - add rust to BuildRequires - Micro fix the ioctl allow for aarch64 - bugfix VM run failed from memory snapshot - Fix setting core reg error when restoring VM. - Update ioctl allow list. - Introduce riscv64 architecture support - vfio-pci: fix a deadlock problem - bugfix the error in the return result of query_commands - add QMP query-cpus-fast - add support to interconnect with libvirt - Do not delete fd which has not been added - Rework patch 9/10 as patch 12/13. - Adjust spec file to apply them for riscv64. - Release version 1.2.2-1. - bugfix: fix kernel patch apply failure issue - bugfix: fix object upatch id duplicated issue - feature: support saving & restoring patch status by operation order - bugfix: fix rust 1.84 compile failure - bugfix: fix cannot find working directory - bugfix: fix set signal handler failure - bugfix: fix active accepted patch failure - feature: support riscv64 - feature: support 'syscare rescan' command - feature: support patch blacklist / blocklist - feature: support custom kernel config - feature: support log config - feature: add metadata viewer - feature: add metadata generator - bugfix: supress rpm signature warnings - bugfix: remove build id check - bugfix: ignore useless sections - bugfix: fix attach non-exist process failure - bugfix: fix remote mmap failure - bugfix: fix some symbol resolving issue - bugfix: remove upatch failure process list - bugfix: remove root permission check - feature: upatch supports overridding line macros - bugfix: fix upatch id parsing error - bugfix: fix upatch object linker detection failure - bugfix: fix kernel module build failure - bugfix: fix kernel patch name length limitation - bugfix: fix multiple upatch-diff issues - bugfix: fix multiple upatch-manage issues - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz - change: add debuginfo package version verification in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build - bugfix: fix special section correlation failure - bugfix: fix compilation command misdetection - bugfix: fix incorrect upatch object lookup when upatch ID conflicts - bugfix: fix patch file disorder when building cumulative patches - bugfix: fix abnormal syscare CLI return value when external command failure - bugfix: fix stack check false warnings under boundary conditions - bugfix: fix build failure under Rust 1.89 - bugfix: fix apply patch error - Release version 1.2.2-1. - bugfix: fix kernel patch apply failure issue - bugfix: fix object upatch id duplicated issue - feature: support saving & restoring patch status by operation order - bugfix: fix rust 1.84 compile failure - bugfix: fix cannot find working directory - bugfix: fix set signal handler failure - bugfix: fix active accepted patch failure - feature: support riscv64 - feature: support 'syscare rescan' command - feature: support patch blacklist / blocklist - feature: support custom kernel config - feature: support log config - feature: add metadata viewer - feature: add metadata generator - bugfix: supress rpm signature warnings - bugfix: remove build id check - bugfix: ignore useless sections - bugfix: fix attach non-exist process failure - bugfix: fix remote mmap failure - bugfix: fix some symbol resolving issue - bugfix: remove upatch failure process list - bugfix: remove root permission check - feature: upatch supports overridding line macros - bugfix: fix upatch id parsing error - bugfix: fix upatch object linker detection failure - bugfix: fix kernel module build failure - bugfix: fix kernel patch name length limitation - bugfix: fix multiple upatch-diff issues - bugfix: fix multiple upatch-manage issues - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz - change: add debuginfo package version verification in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build - bugfix: fix special section correlation failure - bugfix: fix compilation command misdetection - bugfix: fix incorrect upatch object lookup when upatch ID conflicts - bugfix: fix patch file disorder when building cumulative patches - bugfix: fix abnormal syscare CLI return value when external command failure - bugfix: fix stack check false warnings under boundary conditions - bugfix: fix build failure under Rust 1.89 - bugfix: fix apply patch error - Release version 1.2.2-1. - bugfix: fix kernel patch apply failure issue - bugfix: fix object upatch id duplicated issue - feature: support saving & restoring patch status by operation order - bugfix: fix rust 1.84 compile failure - bugfix: fix cannot find working directory - bugfix: fix set signal handler failure - bugfix: fix active accepted patch failure - feature: support riscv64 - feature: support 'syscare rescan' command - feature: support patch blacklist / blocklist - feature: support custom kernel config - feature: support log config - feature: add metadata viewer - feature: add metadata generator - bugfix: supress rpm signature warnings - bugfix: remove build id check - bugfix: ignore useless sections - bugfix: fix attach non-exist process failure - bugfix: fix remote mmap failure - bugfix: fix some symbol resolving issue - bugfix: remove upatch failure process list - bugfix: remove root permission check - feature: upatch supports overridding line macros - bugfix: fix upatch id parsing error - bugfix: fix upatch object linker detection failure - bugfix: fix kernel module build failure - bugfix: fix kernel patch name length limitation - bugfix: fix multiple upatch-diff issues - bugfix: fix multiple upatch-manage issues - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz - change: add debuginfo package version verification in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build - bugfix: fix special section correlation failure - bugfix: fix compilation command misdetection - bugfix: fix incorrect upatch object lookup when upatch ID conflicts - bugfix: fix patch file disorder when building cumulative patches - bugfix: fix abnormal syscare CLI return value when external command failure - bugfix: fix stack check false warnings under boundary conditions - bugfix: fix build failure under Rust 1.89 - bugfix: fix apply patch error - Release version 1.2.2-1. - bugfix: fix kernel patch apply failure issue - bugfix: fix object upatch id duplicated issue - feature: support saving & restoring patch status by operation order - bugfix: fix rust 1.84 compile failure - bugfix: fix cannot find working directory - bugfix: fix set signal handler failure - bugfix: fix active accepted patch failure - feature: support riscv64 - feature: support 'syscare rescan' command - feature: support patch blacklist / blocklist - feature: support custom kernel config - feature: support log config - feature: add metadata viewer - feature: add metadata generator - bugfix: supress rpm signature warnings - bugfix: remove build id check - bugfix: ignore useless sections - bugfix: fix attach non-exist process failure - bugfix: fix remote mmap failure - bugfix: fix some symbol resolving issue - bugfix: remove upatch failure process list - bugfix: remove root permission check - feature: upatch supports overridding line macros - bugfix: fix upatch id parsing error - bugfix: fix upatch object linker detection failure - bugfix: fix kernel module build failure - bugfix: fix kernel patch name length limitation - bugfix: fix multiple upatch-diff issues - bugfix: fix multiple upatch-manage issues - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz - change: add debuginfo package version verification in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build - bugfix: fix special section correlation failure - bugfix: fix compilation command misdetection - bugfix: fix incorrect upatch object lookup when upatch ID conflicts - bugfix: fix patch file disorder when building cumulative patches - bugfix: fix abnormal syscare CLI return value when external command failure - bugfix: fix stack check false warnings under boundary conditions - bugfix: fix build failure under Rust 1.89 - bugfix: fix apply patch error - Release version 1.2.2-1. - bugfix: fix kernel patch apply failure issue - bugfix: fix object upatch id duplicated issue - feature: support saving & restoring patch status by operation order - bugfix: fix rust 1.84 compile failure - bugfix: fix cannot find working directory - bugfix: fix set signal handler failure - bugfix: fix active accepted patch failure - feature: support riscv64 - feature: support 'syscare rescan' command - feature: support patch blacklist / blocklist - feature: support custom kernel config - feature: support log config - feature: add metadata viewer - feature: add metadata generator - bugfix: supress rpm signature warnings - bugfix: remove build id check - bugfix: ignore useless sections - bugfix: fix attach non-exist process failure - bugfix: fix remote mmap failure - bugfix: fix some symbol resolving issue - bugfix: remove upatch failure process list - bugfix: remove root permission check - feature: upatch supports overridding line macros - bugfix: fix upatch id parsing error - bugfix: fix upatch object linker detection failure - bugfix: fix kernel module build failure - bugfix: fix kernel patch name length limitation - bugfix: fix multiple upatch-diff issues - bugfix: fix multiple upatch-manage issues - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz - change: add debuginfo package version verification in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build - bugfix: fix special section correlation failure - bugfix: fix compilation command misdetection - bugfix: fix incorrect upatch object lookup when upatch ID conflicts - bugfix: fix patch file disorder when building cumulative patches - bugfix: fix abnormal syscare CLI return value when external command failure - bugfix: fix stack check false warnings under boundary conditions - bugfix: fix build failure under Rust 1.89 - bugfix: fix apply patch error - disable User/Group on hongmeng - enable subtree_control for sub cgroup on hongmeng - update version to 1.0.0 - sync patches from upstream - resolve wantedby invalid and fix reboot symlink not correct after reinstall - read pid cmdline incorrect - resolve not mounted home - sync patches from upstream - sync patches from upstream - update version to 1.1.0 - disable User/Group on hongmeng - enable subtree_control for sub cgroup on hongmeng - update version to 1.0.0 - sync patches from upstream - resolve wantedby invalid and fix reboot symlink not correct after reinstall - read pid cmdline incorrect - resolve not mounted home - sync patches from upstream - sync patches from upstream - update version to 1.1.0 - disable User/Group on hongmeng - enable subtree_control for sub cgroup on hongmeng - update version to 1.0.0 - sync patches from upstream - resolve wantedby invalid and fix reboot symlink not correct after reinstall - read pid cmdline incorrect - resolve not mounted home - sync patches from upstream - sync patches from upstream - update version to 1.1.0 - disable User/Group on hongmeng - enable subtree_control for sub cgroup on hongmeng - update version to 1.0.0 - sync patches from upstream - resolve wantedby invalid and fix reboot symlink not correct after reinstall - read pid cmdline incorrect - resolve not mounted home - sync patches from upstream - sync patches from upstream - update version to 1.1.0 - update to 140.4.0 - update to 140.5.0 - build with system cbindgen - drop useless post scripts, they will be done automaticaly by triggers - update to 140.7.0 - update to 140.7.2 - update to 140.8.0 - update to 140.9.1 - update to 140.10.0 - update to 140.10.1 - update to 140.10.2 - update to 140.11.0 - update to 140.4.0 - update to 140.5.0 - build with system cbindgen - drop useless post scripts, they will be done automaticaly by triggers - update to 140.7.0 - update to 140.7.2 - update to 140.8.0 - update to 140.9.1 - update to 140.10.0 - update to 140.10.1 - update to 140.10.2 - update to 140.11.0 - update to 140.4.0 - update to 140.5.0 - build with system cbindgen - drop useless post scripts, they will be done automaticaly by triggers - update to 140.7.0 - update to 140.7.2 - update to 140.8.0 - update to 140.9.1 - update to 140.10.0 - update to 140.10.1 - update to 140.10.2 - update to 140.11.0 - update to 140.4.0 - update to 140.5.0 - build with system cbindgen - drop useless post scripts, they will be done automaticaly by triggers - update to 140.7.0 - update to 140.7.2 - update to 140.8.0 - update to 140.9.1 - update to 140.10.0 - update to 140.10.1 - update to 140.10.2 - update to 140.11.0 - update to 140.4.0 - update to 140.5.0 - build with system cbindgen - drop useless post scripts, they will be done automaticaly by triggers - update to 140.7.0 - update to 140.7.2 - update to 140.8.0 - update to 140.9.1 - update to 140.10.0 - update to 140.10.1 - update to 140.10.2 - update to 140.11.0 - update to 140.4.0 - update to 140.5.0 - build with system cbindgen - drop useless post scripts, they will be done automaticaly by triggers - update to 140.7.0 - update to 140.7.2 - update to 140.8.0 - update to 140.9.1 - update to 140.10.0 - update to 140.10.1 - update to 140.10.2 - update to 140.11.0 - init. - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch. - Add Patch: 0002-Modify-pam_strerror-function.patch. - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch. - Add Patch: 0004-refactor-fix-include-flag-error.patch. - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch. - Add Patch: 0006-Fix-the-problem-of-getting-wrong-username.patch - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h. - Add Patch:0007-change-log-path.patch. - update: update versiono to 1.0.0 - feat: del BuildRequires: cargo-config. - chore: add dir vendor. - update: update version to 3.0.0 - update: update License. - init. - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch. - Add Patch: 0002-Modify-pam_strerror-function.patch. - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch. - Add Patch: 0004-refactor-fix-include-flag-error.patch. - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch. - Add Patch: 0006-Fix-the-problem-of-getting-wrong-username.patch - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h. - Add Patch:0007-change-log-path.patch. - update: update versiono to 1.0.0 - feat: del BuildRequires: cargo-config. - chore: add dir vendor. - update: update version to 3.0.0 - update: update License. - init. - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch. - Add Patch: 0002-Modify-pam_strerror-function.patch. - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch. - Add Patch: 0004-refactor-fix-include-flag-error.patch. - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch. - Add Patch: 0006-Fix-the-problem-of-getting-wrong-username.patch - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h. - Add Patch:0007-change-log-path.patch. - update: update versiono to 1.0.0 - feat: del BuildRequires: cargo-config. - chore: add dir vendor. - update: update version to 3.0.0 - update: update License. - fix:I9CANW select 关键字没有输出 - fix:I9KZET riscv64 下cargo build编译时出现缺少依赖的问题 - fix:IA4DBK Change the verson number to be consistent with other software packages - feat: add patch 0003-fix-echo-a.z.patch - feat: add patch 0004-fix-type-return-error.patch - 修复echo {a..z} 执行错误和type命令返回值错误 - feat: 修复coproc命令错误问题 - feat: 修复utshell --help 显示信息问题 - fix: 修复在rustc版本为1.88时编译报错问题(bugid:ICLF9D) - remove the semicolon at the end of the macro - fix build error on loongarch64 for nix - update version to 1.0.0,fix #29 #30 - fix #28 ulimit command error - fix:I9CANW select 关键字没有输出 - fix:I9KZET riscv64 下cargo build编译时出现缺少依赖的问题 - fix:IA4DBK Change the verson number to be consistent with other software packages - feat: add patch 0003-fix-echo-a.z.patch - feat: add patch 0004-fix-type-return-error.patch - 修复echo {a..z} 执行错误和type命令返回值错误 - feat: 修复coproc命令错误问题 - feat: 修复utshell --help 显示信息问题 - fix: 修复在rustc版本为1.88时编译报错问题(bugid:ICLF9D) - remove the semicolon at the end of the macro - fix build error on loongarch64 for nix - update version to 1.0.0,fix #29 #30 - fix #28 ulimit command error - 升级至0.0.2大版本，解决部分编译报错. - fix unable to callocate memory. - Add Patch: 0002-fix-use_pty-function-error.patch - Add Patch: 0003-fix-use_utsudo-A-error.patch - Add Patch: 0004-fix-use_utsudo-T-error.patch - add loongarch64 support for utsudo - 升级至0.0.2大版本，解决部分编译报错. - fix unable to callocate memory. - Add Patch: 0002-fix-use_pty-function-error.patch - Add Patch: 0003-fix-use_utsudo-A-error.patch - Add Patch: 0004-fix-use_utsudo-T-error.patch - add loongarch64 support for utsudo - 升级至0.0.2大版本，解决部分编译报错. - fix unable to callocate memory. - Add Patch: 0002-fix-use_pty-function-error.patch - Add Patch: 0003-fix-use_utsudo-A-error.patch - Add Patch: 0004-fix-use_utsudo-T-error.patch - add loongarch64 support for utsudo - 升级至0.0.2大版本，解决部分编译报错. - fix unable to callocate memory. - Add Patch: 0002-fix-use_pty-function-error.patch - Add Patch: 0003-fix-use_utsudo-A-error.patch - Add Patch: 0004-fix-use_utsudo-T-error.patch - add loongarch64 support for utsudo - init - update to 0.8.8-1 - Fix PPC64 page size in binary builds - init - update to 0.8.8-1 - Fix PPC64 page size in binary builds