# changelog

author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - fix: modify install permission for library and config file.
  - fix: update nullptr check.
  - fix: update VM consistency log.
  - fix: extend RPC transmission timeout to 20 seconds.
  - fix: clear const_cast in domain.cpp; solve memory leak.
  - fix: add debug log for TSB API.
  - fix: extend RPC transmission timeout


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - 修改日志问题
  - fix: log ERROR when peer received a failure notification.
  - fix: remove unsupported flag in DomainMigrate log.
  - fix: remove redundant nullptr check.
  - fix: change measure item name from grub_cfg to grub.cfg.
  - 修改安全问题
  - fix: safety inspection.
  - 修改检视意见
  - 格式化代码
  - 修改安全排查
  - fix: remove option --undefinesource.
  - fix: add return value check for GetVRoots.
  - fix: remove `--allow-store-measurements` option in VM create.
  - fix: remove RPATH compile option.
  - fix: call MigrationNotify after migration success in source end.
  - 修改安全排查问题
  - fix: update doc.
  - fix: modify VM state to shutoff after migration.
  - fix: add memory free for error branch in foreign_mounter.cpp


author: cx <cx22757@163.com> - 0.0.1-4
changelog:
  - fix: adapt to new VerifyTrustReport API.
  - 增加start虚机耗时日志
  - 保持挂载和startVRoot进行异步，并且不可以让checkmeasure和startVRoot异步
  - delete no use function
  - 1: adapter mock 2：add time-consuming debug 3: async StartVRoot and CheckGuestBeforeStart
  - fix: update doc and CLI help info.


author: cx <cx22757@163.com> - 0.0.1-5
changelog:
  - fix: update TSB-agent mock implement.
  - docs: update supported OS version
  - fix: update download URL for libboundscheck.
  - fix: rename sessionId to uuid.
  - fix: add suggestion for edk2 version


author: cx <cx22757@163.com> - 0.0.1-6
changelog:
  - fix: update URL in scripts.
  - Merge branch 'remote_master'
  - 优化资料以及修改校验路径逻辑
  - 对readme中的TLS证书示例上加上特别说明：有安全问题
  - add mock for file_io, grpc, libguestfs, libvirt
  - 移除libvirt生成证书的脚本，移动到readme文


author: zhourenjian <zhourenjian@huawei.com> - 2025.36-1
changelog:
  - Adapt E2B to the arm64 architecture, remove its dependency on GCP, and add a one-click local installation script.Fix start-client process, use dnsmasq replace systemd-resolved, use paramater to decide current client belongs to which node pool, use glibc busybox,use provision.sh to install vm's deps while building template.Add arm vmlinux.bin and change x86 vmlinux.bin name.Make start-client process local.use dnsmasq replace systemd-resolved. Use paramater to decide current client belongs to which node pool. fix configure.sh run fail because busybox has no bash.change async to sync.complete readme.


author: Hongyu Shi <shywzt@iCloud.com> - 2.2.0-1
changelog:
  - Add main package alias witty-framework-lite
  - Add witty-mcp-manager subpackage (Nuitka-compiled binary)


author: Hongyu Shi <shywzt@iCloud.com> - 2.2.0-7
changelog:
  - Wait for network-online before starting witty-mcp-manager service
  - Warn explicitly when RPM post-install uv bootstrap fails


author: renjunkai1@example.com - 0.0.1-19
changelog:
  - fix: Add itrustee dependency for building RPM cli.
  - fix:fix npu nonce default value
  - fix: Modify attester plugin check. If it is disabled, then will skip parameters validation. fix: Add demo UUID for itrustee attester plugin.
  - fix:[agent]Optimize scheduled task trigger time to local time; use cron_expression + cron_delay to prevent multi-node DOS on server
  - feat: Remove custom_data from the user policy example
  - feat: Add Chinese documentation
  - fix: Add "itrustee" description for attester_type in API document.
  - fix: Add cjson dependency for deployment by docker. Move cjson from agent to server for deployment by rpm.
  - fix: fix ascend_npu name error
  - feat: add ascend_npu server support
  - fix: Modify the content of the matched_policy field in the token
  - fix: Add communication matrix description.
  - fix: Optimize the code for the policy management module
  - fix: Optimize the service layer call logic for the certificate management module
  - fix: Modify the Certificate Error Module
  - fix: Modify the Certificate Management Module


author: renjunkai1@example.com - 0.0.1-21
changelog:
  - fix: Add a cargo.lock file to lock dependency versions.
  - fix:[plugin manager] replace unwrap with results
  - fix:[policy engine] forbid custom functions and loop with number range
  - fix: Add libboundscheck library for building RPM agent and cli.
  - fix:[policy engine] forbid custom functions and loop with number range
  - feat: Modify the URL paths in the API documentation
  - feat: Add a default value for executables_value in the tpm_boot.rego file.
  - fix:fix key managerd workers


author: renjunkai1@example.com - 0.0.1-22
changelog:
  - feat: add compilation options for security requirements
  - fix: [attestation server] fix unwrap problem in initialization process
  - fix: strengthen the policy injection proctection
  - fix: delete tests that are commented out
  - fix: [endorsement] fix unwrap problem
  - fix: add more strict parameter validation for user id
  - feat:modify register white box inspection
  - fix:fix apikey block_on
  - Merge openeuler/master: resolve conflicts and integrate upstream changes
  - perf: optimize PCR index validation
  - config: update PCR banks config for batch processing
  - test: add test cases for TPM plugin improvements
  - fix:fix apikey block_on
  - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems.
  - fix: optimize TPM NV reading and PCR collection


author: cx <cx22757@163.com> - 0.0.1-23
changelog:
  - fix:add tpm.rego,modify ut and agent_config
  - feat: fix log name
  - Revert "bugfix: add key_managerd.service to rpm"
  - bugfix: add key_managerd.service to rpm
  - feat: Adapting to the log of ascend npu
  - fix:fix server_config
  - feat: The virtCCA plugin supports log collection and verification in the dim format
  - feat:add TpmPlugin for attester and verfier dim_log
  - fix: cancel exporting unnecessary lib.
  - fix: clear magic number in CCA plugin.
  - fix: split the verify_logs func in CCA verifier.
  - fix: add UT for CCA verifier plugin.
  - fix: Optimize command-line options and their explanations
  - feat: update docs and RPM spec files for CCA.
  - feat: add CCA verifier plugin.
  - feat: Modify the input of the all policy to the output of the plugin.
  - feat: Modify the interface documentation
  - feat: The baseline generation tool supports dim baseline generation.
  - feat: Added all-type policy
  - feat: add CCA attester plugin.
  - fix: extract public log verify code.
  - fix:Fix failure to read IAK certificate
  - fix: Adapt to EAR token format for itrustee plugin.
  - fix: Adding the secure boot field to the token in the virtCCA plugin
  - fix: Remove unnecessary fields in itrustee.rego.
  - fix: Add public key information and display the realm challenge when no platform token exists.
  - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: #   conflict attestation_server/policy/src/services/policy_service.rs
  - fix: Add JWT signature verification when updating the policy
  - feat: Add platform token challenge field and refine software component serialization
  - fix: Modify the translated content of the document
  - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events.
  - fix: Modified failed test cases
  - Merge remote-tracking branch 'origin/issue' into issue
  - fix: Capitalize the first letter of error messages
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - fix: Add codecheck build script
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - bugfix: add a chapter for readme
  - fix: add UT
  - feat(api): configure server limits and improve error handling
  - fix: Fixing some errors in the API documentation


author: cx <cx22757@163.com> - 0.0.1-24
changelog:
  - fix: declare dependency for ITrustee.
  - fix: add copyright notice.
  - test:add tpm and virtcca UT
  - fix: update descriptions of request params.
  - fix: fixes OpenSSL affected by CVE-2025-15467.
  - feat: add ascend_npu cbor data to policy
  - feat: Add the user policy for the TPM plugin


author: cx <cx22757@163.com> - 0.0.1-27
changelog:
  - Revert "feat: Added Compatibility Plugin"
  - Revert "feat: Add logic for the main plugin to retrieve information for each plugin."
  - feat: Added token verification interface, supporting custom public key input.
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: update rustup source in code-check script.
  - fix: replace default rustup source in code-check script.
  - Merge remote-tracking branch 'upstream/master' into plugin
  - feat: add UT to key_manager
  - feat: Added Compatibility Plugin


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: herengui <herengui@kylinsec.com.cn> - 1.50.2-9
changelog:
  - Fix CVE-2026-28296: reject paths containing CR/LF characters in FTP backend
  - ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (server-supplied paths)


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403sp3.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-1
changelog:
  - Initial package build
  - Provide libknet_core.so, libknet_frame.so, libdpstack.so
  - Include knet_mp_daemon binary
  - Add configuration files for knet communication, rsyslog, and logrotate


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: jade_t <yzd50036@gmail.com> - 1.29.1-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the installation conflict between kubernetes-kubelet and kubernetes-node


author: donglihao <donglihao1@huawei.com> - 1.2-1
changelog:
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.2-4
changelog:
  - Integrated previous updates:
  - remove usage of cxxfilt
  - disable HAS_BTF_SUPPORT in build.sh
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: Funda Wang <fundawang@yeah.net> - 140.5.0-1
changelog:
  - update to 140.5.0
  - build with system cbindgen
  - drop useless post scripts, they will be done automaticaly by triggers


author: yaoxin <1024769339@qq.com> - 3.4.1-1
changelog:
  - Update to 3.4.1:
    * Fix manpage path in pyproject.toml
    * Fallback to common if a platform is specified using -p flag,
      but a page doesn't exist for that platform
    * Drop support for EOL Python 3.8 version
    * Fix broken --render option
    * Fix duplicate platform information shown in pages like du, cd, w


author: chukaiping <chukaiping@baidu.com> - 3.4.3-1
changelog:
  - Update to 3.4.3
    * Fixed unpredictable platform selection when displaying pages 
    * fix: unpredictable platform selection introduced
    * Added a warning when a page is not available for the current platform


author: zhang_jian <zhang_jian7@hoperun.com> - 3.4.4-1
changelog:
  - update to 3.4.4
  - Drop support for EOL Python 3.9 version
  - Allow cache updating and command displaying on the same command
  - fix: only raise URLError or HTTPError when there are no results at all


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


