Go to file
Daniel P. Berrangé 3c00769e65 Fix pccs npm security flaws
Sync patches from Fedora 43, to fix multiple pccs npm security flaws,
and fix typo in pccsadmin help text.

CVE-2026-23745, CVE-2026-23950, CVE-2026-24842, CVE-2025-13465, CVE-2025-15284

Resolves: RHEL-145005, RHEL-144190, RHEL-142482, RHEL-138075, RHEL-140108
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2026-02-05 11:52:25 +00:00
.gitignore Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
92-sgx-provision.rules Initial import 2025-03-19 16:55:37 +00:00
0000-Add-support-for-building-against-host-openssl-crypto.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0001-Add-support-for-building-against-host-tinyxml2-lib.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0002-Add-support-for-building-against-host-CppMicroServic.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0003-Improve-make-debuggability.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0004-Support-disabling-use-of-git-for-ippcp-code.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0005-disable-openmp-protobuf-sample_crypto-builds.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0006-Fix-compat-with-gcc-14.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0007-Fix-escaping-of-regexes-in-sgx-asm-pp.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0008-psw-prefer-dev-sgx_provision-dev-sgx_enclave.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0009-psw-fix-soname-for-libuae_service.so-library.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0010-pcl-remove-redundant-use-of-bool-type.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0011-sdk-honour-CFLAGS-LDFLAGS-set-from-environment.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0012-psw-make-aesm_service-build-verbose.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0013-Fix-modern-C-function-prototype-compliance.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0014-Add-wrapper-for-nasm-to-fix-cmake-compat.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0015-fix-BOM-for-pccs-with-DCAP-1.23.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0050-Disable-inclusion-of-AESM-in-installer.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0100-Drop-use-of-bundled-pre-built-openssl.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0101-Improve-debuggability-of-build-system.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0102-Support-build-time-setting-of-enclave-load-directory.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0103-Look-for-versioned-sgx_urts-library-in-PCKRetrievalT.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0104-pccsadmin-only-import-pypac-module-on-Windows.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0105-Look-for-PCKRetrievalTool-config-file-in-etc.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0106-Honour-CFLAGS-CXXFLAGS-LDFLAGS-for-various-tools-and.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0107-qgs-add-space-between-program-name-first-arg-in-usag.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0108-qgs-protect-against-format-strings-in-QL-log-message.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0109-qgs-add-debug-parameter-to-control-logging.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0110-pccsadmin-remove-leftover-debugging-print-args-state.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0111-Fix-soname-version-for-libsgx_qe3_logic.so-library.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0112-Workaround-broken-GCC-15.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0113-Don-t-disable-cf-protection-for-qgs.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0114-Delete-broken-checks-for-GCC-version-that-break-fsta.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0115-Use-distro-provided-rapidjson-package.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0116-Don-t-stomp-on-VERBOSE-variable.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0117-qgs-add-m-MODE-parameter-for-UNIX-socket-mode.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0118-pccs-sanitize-paths-to-all-resources.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0119-pccs-only-pass-ApiKey-if-it-is-set.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0120-pccsadmin-make-keyring-module-optional.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0121-pccsadmin-convert-from-asn1-to-pyasn1-python-module.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0122-pccsadmin-fully-switch-to-pycryptography-for-CRL-ver.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0123-pccsadmin-use-more-of-pycryptography-instead-of-pyop.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0124-pccsadmin-prefer-pycryptography-over-pyopenssl.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0125-pccsadmin-add-fallback-for-when-pyopenssl-is-not-ava.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0126-pccsadmin-ignore-errors-trying-to-clear-the-keyring.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0127-PCS-Client-Tool-Migrate-from-deprecated-pkg_resource.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0128-qgs-add-compat-for-boost-1.87-which-drops-asio-io_se.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0129-qgs-add-compat-for-boost-1.89-which-deprecated-deadl.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0130-Bump-tar-fs-from-2.1.2-to-2.1.3-in-QuoteGeneration-p.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0131-Bump-on-headers-and-morgan-in-QuoteGeneration-pccs-4.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0132-Bump-brace-expansion-from-1.1.11-to-1.1.12-in-QuoteG.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0133-Bump-tar-fs-from-2.1.3-to-2.1.4-in-QuoteGeneration-p.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0134-PCCS-dependencies-updated-to-latest-minor.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0135-pccs-force-override-tar-module-to-7.0.0-series.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0136-pccsadmin-fix-name-of-input-file-for-cache-command-i.patch Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
0200-Enable-pointing-sgxssl-build-to-alternative-glibc-he.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0201-Workaround-missing-output-directory.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0202-Disable-various-EC-crypto-features.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0203-Disable-sm2-and-sm4-crypto-algorithms.patch Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
0300-Drop-min-openssl-from-3.0.8-to-3.0.7.patch Initial import 2025-03-19 16:55:37 +00:00
0301-Drop-Werror-from-build-flags.patch Initial import 2025-03-19 16:55:37 +00:00
aesmd.service Fix paths to binaries in service files 2025-04-01 10:28:39 +01:00
aesmd.sysusers.conf Initial import 2025-03-19 16:55:37 +00:00
download.sh Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
gating.yaml Temporarily disable automatic tier1 gating 2025-06-16 13:50:53 +01:00
linux-sgx.spec Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00
mpa_registration.service Fix paths to binaries in service files 2025-04-01 10:28:39 +01:00
pccs-node-ffi-rs-bundler Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
pccs-nodejs-bundler Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
pccs.service Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
pccs.sysusers.conf Update to SGX 2.26 / DCAP 1.23, adding PCCS service 2025-11-18 18:29:56 +00:00
qgs.service Adapt qgs.service for SELinux policy and sock perms 2025-06-09 13:55:12 +01:00
qgs.sysconfig Adapt qgs.service for SELinux policy and sock perms 2025-06-09 13:55:12 +01:00
qgs.sysusers.conf Initial import 2025-03-19 16:55:37 +00:00
repack.sh Initial import 2025-03-19 16:55:37 +00:00
sgxprv.sysusers.conf Initial import 2025-03-19 16:55:37 +00:00
sources Fix pccs npm security flaws 2026-02-05 11:52:25 +00:00