From 3c411904e4e77b6950c984ed2a72e03e9a5cb49f Mon Sep 17 00:00:00 2001 From: Manuthor Date: Sun, 15 Feb 2026 09:08:26 +0100 Subject: [PATCH 1/2] build: release 5.16.0 --- .github/scripts/README.md | 2 + .github/scripts/release.sh | 1 + .github/scripts/update_hashes.sh | 37 +- .github/scripts/windows_ui.ps1 | 2 +- CHANGELOG.md | 9 +- Cargo.lock | 36 +- Cargo.toml | 2 +- README.md | 338 ++++++++-------- crate/access/Cargo.toml | 2 +- crate/cli/Cargo.toml | 6 +- crate/client_utils/Cargo.toml | 4 +- crate/crypto/Cargo.toml | 2 +- crate/hsm/base_hsm/Cargo.toml | 2 +- crate/hsm/crypt2pay/Cargo.toml | 2 +- crate/hsm/proteccio/Cargo.toml | 2 +- crate/hsm/smartcardhsm/Cargo.toml | 2 +- crate/hsm/softhsm2/Cargo.toml | 2 +- crate/hsm/utimaco/Cargo.toml | 2 +- crate/interfaces/Cargo.toml | 2 +- crate/kmip/Cargo.toml | 2 +- crate/kms_client/Cargo.toml | 2 +- crate/server/Cargo.toml | 20 +- crate/server_database/Cargo.toml | 8 +- crate/test_kms_server/Cargo.toml | 4 +- crate/wasm/Cargo.toml | 2 +- documentation/docs/fips.md | 2 +- documentation/docs/index.md | 8 +- .../installation_getting_started.md | 26 +- .../docs/installation/marketplace_guide.md | 2 +- .../server.vendor.dynamic.darwin.sha256 | 2 +- .../server.vendor.dynamic.linux.sha256 | 2 +- .../server.vendor.static.darwin.sha256 | 2 +- .../server.vendor.static.linux.sha256 | 2 +- nix/expected-hashes/ui.npm.sha256 | 2 +- nix/expected-hashes/ui.vendor.fips.sha256 | 2 +- nix/expected-hashes/ui.vendor.non-fips.sha256 | 2 +- sbom/openssl/bom.cdx.json | 89 +---- sbom/openssl/bom.spdx.json | 91 +---- sbom/openssl/meta.json | 10 +- sbom/openssl/vulns.csv | 367 +----------------- ui/package-lock.json | 4 +- ui/package.json | 2 +- 42 files changed, 321 insertions(+), 787 deletions(-) diff --git a/.github/scripts/README.md b/.github/scripts/README.md index fd349d8cb..6f1d1820e 100644 --- a/.github/scripts/README.md +++ b/.github/scripts/README.md @@ -352,6 +352,8 @@ bash .github/scripts/nix.sh --variant fips --link dynamic sbom --target server Updates Nix expected-hash inputs by parsing **GitHub Actions** packaging logs (fixed-output derivation hash mismatches). +This works even if the workflow run is still in progress (it fetches per-job logs directly when needed). + This command is meant to be used after a CI packaging job fails with a message like: - `specified: sha256-...` diff --git a/.github/scripts/release.sh b/.github/scripts/release.sh index d52815512..dbed8b3a8 100755 --- a/.github/scripts/release.sh +++ b/.github/scripts/release.sh @@ -63,3 +63,4 @@ ${SED_BINARY} "${SED_IN_PLACE[@]}" 's/(#\([0-9]\+\))/([#\1](https:\/\/github.com bash .github/scripts/build_ui.sh bash .github/scripts/nix.sh update-hashes +bash .github/scripts/nix.sh sbom diff --git a/.github/scripts/update_hashes.sh b/.github/scripts/update_hashes.sh index 8cfad5f70..7bdc66438 100644 --- a/.github/scripts/update_hashes.sh +++ b/.github/scripts/update_hashes.sh @@ -114,10 +114,12 @@ else # Get all failed jobs from this run (id + name). # We rely on the job name (when available) to infer platform/linkage for server vendor hashes. FAILED_JOBS=$(gh api "repos/Cosmian/kms/actions/runs/$RUN_ID/jobs" \ - --jq '.jobs[] | select(.conclusion == "failure") | [.id, .name] | @tsv' 2>/dev/null || echo "") + --jq '.jobs[] + | select((.conclusion == "failure") or (.status == "in_progress")) + | [.id, .name] | @tsv' 2>/dev/null || echo "") if [ -z "$FAILED_JOBS" ]; then - echo "No failed jobs found in run $RUN_ID. Nothing to update." + echo "No failed or in-progress jobs found in run $RUN_ID. Nothing to update." exit 0 fi fi @@ -125,6 +127,31 @@ fi # Declare associative array to store hash updates declare -A FILE_TO_HASH +stream_job_logs() { + local run_id="$1" + local job_id="$2" + local tmp + tmp=$(mktemp -t gha-job-log.XXXXXX) + + # Prefer `gh run view` (nice formatting and smaller for failed steps), + # but it may refuse logs while the overall run is still in progress. + if gh run view "$run_id" --log-failed --job "$job_id" >"$tmp" 2>/dev/null; then + cat "$tmp" + rm -f "$tmp" + return 0 + fi + + if gh run view "$run_id" --log --job "$job_id" >"$tmp" 2>/dev/null; then + cat "$tmp" + rm -f "$tmp" + return 0 + fi + + # Fallback: fetch raw job logs directly (works even if run is still running). + rm -f "$tmp" + gh api "repos/Cosmian/kms/actions/jobs/$job_id/logs" 2>/dev/null || true +} + # Process each failed job while IFS=$'\t' read -r JOB_ID JOB_NAME; do [ -z "${JOB_ID:-}" ] && continue @@ -142,10 +169,6 @@ while IFS=$'\t' read -r JOB_ID JOB_NAME; do # If a specific job was requested and it didn't fail, fall back to the full job log. # Output format is typically: " | ". last_drv_name="" - log_cmd=(gh run view "$RUN_ID" --log-failed --job "$JOB_ID") - if ! "${log_cmd[@]}" >/dev/null 2>&1; then - log_cmd=(gh run view "$RUN_ID" --log --job "$JOB_ID") - fi while IFS= read -r raw_line; do line="$raw_line" @@ -221,7 +244,7 @@ while IFS=$'\t' read -r JOB_ID JOB_NAME; do last_drv_name="" fi fi - done < <("${log_cmd[@]}" 2>/dev/null || true) + done < <(stream_job_logs "$RUN_ID" "$JOB_ID") done <<<"$FAILED_JOBS" # Apply updates diff --git a/.github/scripts/windows_ui.ps1 b/.github/scripts/windows_ui.ps1 index 2ed74438f..4ac4f4386 100644 --- a/.github/scripts/windows_ui.ps1 +++ b/.github/scripts/windows_ui.ps1 @@ -57,7 +57,7 @@ function Build-UI { { "name": "cosmian_kms_client_wasm", "type": "module", - "version": "5.15.0", + "version": "5.16.0", "main": "cosmian_kms_client_wasm.js", "types": "cosmian_kms_client_wasm.d.ts" } diff --git a/CHANGELOG.md b/CHANGELOG.md index 32f3d97d1..6d2d33c37 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -27,7 +27,7 @@ All notable changes to this project will be documented in this file. ### 🐛 Bug Fixes -- Fix SQL Locate request for OpenTelemetry metrics collector: +- Fix SQL Locate request for OpenTelemetry metrics collector (#694): - Refactored SQL Locate query building in locate_query.rs to use bound, typed parameters (LocateQuery + LocateParam) instead of interpolating values into SQL (safer + fixes type/cast handling across SQLite/Postgres/MySQL). - Updated the SQL backends to consume the new LocateQuery API: crate/server_database/src/stores/sql/{mysql,pgsql,sqlite}.rs. - Improved DB test error context in json_access_test.rs to make failures easier to diagnose. @@ -35,8 +35,10 @@ All notable changes to this project will be documented in this file. - mod.rs: add OTEL resource attributes (service name/version + optional environment). - otel_metrics.rs: ensure active_keys_count time series exists even when 0. - cron.rs: fall back to default username if hsm_admin is empty. +- Fix regression on KMIP 1.0 (Fresh and InitialDate attributes) (#689) - Fix Linux packaging smoke tests when the host has `/etc/cosmian/kms.toml` present by running with an explicit temp config. - Make OpenTelemetry export tests resilient under FIPS Nix shells by running `curl` in a clean environment (avoid inherited OpenSSL/LD overrides). +- *(ui)* Azure BYOK export (#697) ### ⚙️ Build @@ -44,10 +46,15 @@ All notable changes to this project will be documented in this file. - SBOM generation improvements: - `.github/scripts/nix.sh sbom` strictly validates `--target/--variant/--link`, defaults to generating all combinations, and supports generating a specific server subset. - SBOM tooling runs in an isolated workdir to avoid stray repo-root artifacts, keeps only final `sbom.csv` + `vulns.csv` reports per output directory, and deduplicates CVE rows in-place (via `nix/scripts/dedup_cves.py`, with optional filtering helper `nix/scripts/filter_vulns.py`). +- *(deps)* Bump jsonwebtoken in the cargo group across 1 directory (#702) +- *(deps)* Bump bytes in the cargo group across 1 directory (#703) +- *(deps)* Bump time in the cargo group across 1 directory (#706) +- *(deps)* Bump actix-files in the cargo group across 1 directory (#707) ### 📚 Documentation - Update SBOM documentation to match the generator output layout and behavior. +- Update OpenSSL versions (#713) ## [5.15.0] - 2026-01-21 diff --git a/Cargo.lock b/Cargo.lock index 52b108258..df6b27380 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1101,7 +1101,7 @@ dependencies = [ [[package]] name = "cosmian_kmip" -version = "5.15.0" +version = "5.16.0" dependencies = [ "base64 0.22.1", "bitflags", @@ -1128,7 +1128,7 @@ dependencies = [ [[package]] name = "cosmian_kms_access" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_kmip", "serde", @@ -1136,7 +1136,7 @@ dependencies = [ [[package]] name = "cosmian_kms_base_hsm" -version = "5.15.0" +version = "5.16.0" dependencies = [ "async-trait", "cosmian_kms_interfaces", @@ -1153,7 +1153,7 @@ dependencies = [ [[package]] name = "cosmian_kms_cli" -version = "5.15.0" +version = "5.16.0" dependencies = [ "assert_cmd", "base64 0.22.1", @@ -1191,7 +1191,7 @@ dependencies = [ [[package]] name = "cosmian_kms_client" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_crypto_core", "cosmian_http_client", @@ -1207,7 +1207,7 @@ dependencies = [ [[package]] name = "cosmian_kms_client_utils" -version = "5.15.0" +version = "5.16.0" dependencies = [ "base64 0.22.1", "clap", @@ -1226,7 +1226,7 @@ dependencies = [ [[package]] name = "cosmian_kms_client_wasm" -version = "5.15.0" +version = "5.16.0" dependencies = [ "base64 0.22.1", "console_error_panic_hook", @@ -1245,7 +1245,7 @@ dependencies = [ [[package]] name = "cosmian_kms_crypto" -version = "5.15.0" +version = "5.16.0" dependencies = [ "aes-gcm-siv", "aes-kw", @@ -1275,7 +1275,7 @@ dependencies = [ [[package]] name = "cosmian_kms_interfaces" -version = "5.15.0" +version = "5.16.0" dependencies = [ "async-trait", "cosmian_kmip", @@ -1288,7 +1288,7 @@ dependencies = [ [[package]] name = "cosmian_kms_server" -version = "5.15.0" +version = "5.16.0" dependencies = [ "actix-cors", "actix-files", @@ -1343,7 +1343,7 @@ dependencies = [ [[package]] name = "cosmian_kms_server_database" -version = "5.15.0" +version = "5.16.0" dependencies = [ "async-trait", "cosmian_findex", @@ -1516,7 +1516,7 @@ checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5" [[package]] name = "crypt2pay_pkcs11_loader" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_kms_base_hsm", ] @@ -2824,7 +2824,7 @@ dependencies = [ [[package]] name = "kmip-derive" -version = "5.15.0" +version = "5.16.0" dependencies = [ "quote", "syn", @@ -3901,7 +3901,7 @@ dependencies = [ [[package]] name = "proteccio_pkcs11_loader" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_kms_base_hsm", ] @@ -4552,7 +4552,7 @@ checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03" [[package]] name = "smartcardhsm_pkcs11_loader" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_kms_base_hsm", "libloading", @@ -4581,7 +4581,7 @@ dependencies = [ [[package]] name = "softhsm2_pkcs11_loader" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_kms_base_hsm", "libloading", @@ -4747,7 +4747,7 @@ checksum = "8f50febec83f5ee1df3015341d8bd429f2d1cc62bcba7ea2076759d315084683" [[package]] name = "test_kms_server" -version = "5.15.0" +version = "5.16.0" dependencies = [ "actix-server", "cosmian_kms_client", @@ -5383,7 +5383,7 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" [[package]] name = "utimaco_pkcs11_loader" -version = "5.15.0" +version = "5.16.0" dependencies = [ "cosmian_kms_base_hsm", ] diff --git a/Cargo.toml b/Cargo.toml index 769da2b45..5b568478a 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -85,7 +85,7 @@ map_err_ignore = "deny" redundant_clone = "deny" [workspace.package] -version = "5.15.0" +version = "5.16.0" edition = "2024" rust-version = "1.87.0" authors = [ diff --git a/README.md b/README.md index ada16b798..c027b57ca 100644 --- a/README.md +++ b/README.md @@ -40,7 +40,7 @@ The **Cosmian KMS** has extensive online [documentation](https://docs.cosmian.co ## 🚀 Quick start -Pre-built binaries [are available](https://package.cosmian.com/kms/5.15.0/) for Linux, MacOS, and Windows, as well as Docker images. To run the server binary, OpenSSL must be available in your path (see "building the KMS" below for details); other binaries do not have this requirement. +Pre-built binaries [are available](https://package.cosmian.com/kms/5.16.0/) for Linux, MacOS, and Windows, as well as Docker images. To run the server binary, OpenSSL must be available in your path (see "building the KMS" below for details); other binaries do not have this requirement. Using Docker to quick-start a Cosmian KMS server on `http://localhost:9998` that stores its data inside the container, run the following command: @@ -513,58 +513,58 @@ The Baseline Server profile (defined in KMIP Profiles v2.1 Section 4.1) requires | Message | Support | | ---------------- | ------: | -| Request Message | ✅ | -| Response Message | ✅ | +| Request Message | ✅ | +| Response Message | ✅ | #### Operations by KMIP Version The following table shows operation support across all KMIP versions. -| Operation | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | -| ---------------------- | :---: | :---: | :---: | :---: | :---: | :---: | :---: | -| Activate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Add Attribute | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Archive | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Cancel | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Certify | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Check | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Create | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Create Key Pair | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Create Split Key | N/A | N/A | ❌ | ❌ | ❌ | ❌ | ❌ | -| Decrypt | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Delete Attribute | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| DeriveKey | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Destroy | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Discover Versions | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Encrypt | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Export | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | -| Get | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Get Attribute List | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Get Attributes | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Get Usage Allocation | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Hash | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Import | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | -| Join Split Key | N/A | N/A | ❌ | ❌ | ❌ | ❌ | ❌ | -| Locate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| MAC | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| MAC Verify | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Notify | N/A | N/A | N/A | N/A | N/A | ❌ | ❌ | -| Obtain Lease | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Poll | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Put | N/A | N/A | N/A | N/A | N/A | ❌ | ❌ | -| Query | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| RNG Retrieve | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| RNG Seed | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Re-certify | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Re-key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Re-key Key Pair | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Recover | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Register | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Revoke | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Set Attribute (Modify) | N/A | N/A | N/A | N/A | N/A | ✅ | ✅ | -| Sign | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Signature Verify | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Validate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Operation | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | +| --------- | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | +| Activate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Add Attribute | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Archive | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Cancel | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Certify | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Check | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Create | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Create Key Pair | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Create Split Key | N/A | N/A | ❌ | ❌ | ❌ | ❌ | ❌ | +| Decrypt | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Delete Attribute | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| DeriveKey | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Destroy | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Discover Versions | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Encrypt | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Export | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | +| Get | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Get Attribute List | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Get Attributes | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Get Usage Allocation | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Hash | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Import | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | +| Join Split Key | N/A | N/A | ❌ | ❌ | ❌ | ❌ | ❌ | +| Locate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| MAC | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| MAC Verify | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Notify | N/A | N/A | N/A | N/A | N/A | ❌ | ❌ | +| Obtain Lease | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Poll | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Put | N/A | N/A | N/A | N/A | N/A | ❌ | ❌ | +| Query | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| RNG Retrieve | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| RNG Seed | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Re-certify | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Re-key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Re-key Key Pair | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Recover | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Register | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Revoke | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Set Attribute (Modify) | N/A | N/A | N/A | N/A | N/A | ✅ | ✅ | +| Sign | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Signature Verify | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Validate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | #### Methodology @@ -579,17 +579,17 @@ If you spot a mismatch or want to extend coverage, please open an issue or PR. The following table shows managed object support across all KMIP versions. -| Managed Object | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | -| -------------- | :---: | :---: | :---: | :---: | :---: | :---: | :---: | -| Certificate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Symmetric Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Split Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Template | 🚫 | 🚫 | 🚫 | 🚫 | 🚫 | N/A | N/A | -| Secret Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Opaque Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| PGP Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Managed Object | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | +| -------------- | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | +| Certificate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Symmetric Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Split Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Template | 🚫 | 🚫 | 🚫 | 🚫 | 🚫 | N/A | N/A | +| Secret Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Opaque Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| PGP Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | Notes: @@ -601,32 +601,32 @@ Notes: The following table shows base object support across all KMIP versions. -| Base Object | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | -| ---------------------------------------- | :---: | :---: | :---: | :---: | :---: | :---: | :---: | -| Attribute | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Credential | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Key Block | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Key Value | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Key Wrapping Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Key Wrapping Specification | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Transparent Key Structures | ✅ | ✅ | ✅ | ✅ | ✅ | N/A | N/A | -| Template-Attribute Structures | N/A | ✅ | ✅ | ✅ | ✅ | N/A | N/A | -| Server Information | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Extension Information | N/A | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Data Length | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Signature Data | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| MAC Data | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | -| Nonce | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Correlation Value | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| Init Indicator | N/A | N/A | N/A | ✅ | ✅ | ✅ | ✅ | -| Final Indicator | N/A | N/A | N/A | ✅ | ✅ | ✅ | ✅ | -| RNG Parameters | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | -| Profile Information | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | -| Validation Information | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | -| Capability Information | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | -| Authenticated Encryption Additional Data | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | -| Authenticated Encryption Tag | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | +| Base Object | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | +| ----------- | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | +| Attribute | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Credential | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Key Block | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Key Value | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Key Wrapping Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Key Wrapping Specification | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Transparent Key Structures | ✅ | ✅ | ✅ | ✅ | ✅ | N/A | N/A | +| Template-Attribute Structures | N/A | ✅ | ✅ | ✅ | ✅ | N/A | N/A | +| Server Information | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Extension Information | N/A | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| Data | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Data Length | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Signature Data | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| MAC Data | N/A | N/A | ✅ | ✅ | ✅ | ✅ | ✅ | +| Nonce | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Correlation Value | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| Init Indicator | N/A | N/A | N/A | ✅ | ✅ | ✅ | ✅ | +| Final Indicator | N/A | N/A | N/A | ✅ | ✅ | ✅ | ✅ | +| RNG Parameters | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | +| Profile Information | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | +| Validation Information | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | +| Capability Information | N/A | N/A | N/A | ❌ | ❌ | ❌ | ❌ | +| Authenticated Encryption Additional Data | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | +| Authenticated Encryption Tag | N/A | N/A | N/A | N/A | ✅ | ✅ | ✅ | Notes: @@ -638,95 +638,95 @@ Notes: The following table shows transparent key structure support across all KMIP versions. -| Structure | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | -| ----------------- | :---: | :---: | :---: | :---: | :---: | :---: | :---: | -| Symmetric Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| DSA Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| DSA Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| RSA Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| RSA Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| DH Private Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| DH Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | -| EC Private Key | N/A | N/A | N/A | ✅ | ✅ | ✅ | ✅ | -| EC Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| ECDSA Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | N/A | N/A | -| ECDSA Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | N/A | N/A | -| ECDH Private Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | -| ECDH Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | -| ECMQV Private Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | -| ECMQV Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | +| Structure | 1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 2.1 | +| --------- | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | :-----: | +| Symmetric Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| DSA Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| DSA Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| RSA Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| RSA Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| DH Private Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| DH Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | +| EC Private Key | N/A | N/A | N/A | ✅ | ✅ | ✅ | ✅ | +| EC Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | +| ECDSA Private Key | ✅ | ✅ | ✅ | ✅ | ✅ | N/A | N/A | +| ECDSA Public Key | ✅ | ✅ | ✅ | ✅ | ✅ | N/A | N/A | +| ECDH Private Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | +| ECDH Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | +| ECMQV Private Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | +| ECMQV Public Key | ❌ | ❌ | ❌ | ❌ | ❌ | N/A | N/A | Note: EC/ECDSA support is present; DH/DSA/ECMQV are not implemented. #### Attributes -| Attribute | Current | -| -------------------------------- | ------: | -| Activation Date | ✅ | -| Alternative Name | ✅ | -| Always Sensitive | ✅ | -| Application Specific Information | ✅ | -| Archive Date | ✅ | -| Attribute Index | ✅ | -| Certificate Attributes | ✅ | -| Certificate Length | ✅ | -| Certificate Type | ✅ | -| Comment | ✅ | -| Compromise Date | ✅ | -| Compromise Occurrence Date | ✅ | -| Contact Information | ✅ | -| Critical | ✅ | -| Cryptographic Algorithm | ✅ | -| Cryptographic Domain Parameters | ✅ | -| Cryptographic Length | ✅ | -| Cryptographic Parameters | ✅ | -| Cryptographic Usage Mask | ✅ | -| Deactivation Date | ✅ | -| Description | ✅ | -| Destroy Date | ✅ | -| Digest | ✅ | -| Digital Signature Algorithm | ✅ | -| Extractable | ✅ | -| Fresh | ✅ | -| Initial Date | ✅ | -| Key Format Type | ✅ | -| Key Value Location | ✅ | -| Key Value Present | ✅ | -| Last Change Date | ✅ | -| Lease Time | ✅ | -| Link | ✅ | -| Name | ✅ | -| Never Extractable | ✅ | -| Nist Key Type | ✅ | -| Object Group | ✅ | -| Object Group Member | ✅ | -| Object Type | ✅ | -| Opaque Data Type | ✅ | -| Original Creation Date | ✅ | -| PKCS#12 Friendly Name | ✅ | -| Process Start Date | ✅ | -| Protect Stop Date | ✅ | -| Protection Level | ✅ | -| Protection Period | ✅ | -| Protection Storage Masks | ✅ | -| Quantum Safe | ✅ | -| Random Number Generator | ✅ | -| Revocation Reason | ✅ | -| Rotate Date | ✅ | -| Rotate Generation | ✅ | -| Rotate Interval | ✅ | -| Rotate Latest | ✅ | -| Rotate Name | ✅ | -| Rotate Offset | ✅ | -| Sensitive | ✅ | -| Short Unique Identifier | ✅ | -| State | ✅ | -| Unique Identifier | ✅ | -| Usage Limits | ✅ | -| Vendor Attribute | ✅ | -| X.509 Certificate Identifier | ✅ | -| X.509 Certificate Issuer | ✅ | -| X.509 Certificate Subject | ✅ | +| Attribute | Current | +| --------- | ------: | +| Activation Date | ✅ | +| Alternative Name | ✅ | +| Always Sensitive | ✅ | +| Application Specific Information | ✅ | +| Archive Date | ✅ | +| Attribute Index | ✅ | +| Certificate Attributes | ✅ | +| Certificate Length | ✅ | +| Certificate Type | ✅ | +| Comment | ✅ | +| Compromise Date | ✅ | +| Compromise Occurrence Date | ✅ | +| Contact Information | ✅ | +| Critical | ✅ | +| Cryptographic Algorithm | ✅ | +| Cryptographic Domain Parameters | ✅ | +| Cryptographic Length | ✅ | +| Cryptographic Parameters | ✅ | +| Cryptographic Usage Mask | ✅ | +| Deactivation Date | ✅ | +| Description | ✅ | +| Destroy Date | ✅ | +| Digest | ✅ | +| Digital Signature Algorithm | ✅ | +| Extractable | ✅ | +| Fresh | ✅ | +| Initial Date | ✅ | +| Key Format Type | ✅ | +| Key Value Location | ✅ | +| Key Value Present | ✅ | +| Last Change Date | ✅ | +| Lease Time | ✅ | +| Link | ✅ | +| Name | ✅ | +| Never Extractable | ✅ | +| Nist Key Type | ✅ | +| Object Group | ✅ | +| Object Group Member | ✅ | +| Object Type | ✅ | +| Opaque Data Type | ✅ | +| Original Creation Date | ✅ | +| PKCS#12 Friendly Name | ✅ | +| Process Start Date | ✅ | +| Protect Stop Date | ✅ | +| Protection Level | ✅ | +| Protection Period | ✅ | +| Protection Storage Masks | ✅ | +| Quantum Safe | ✅ | +| Random Number Generator | ✅ | +| Revocation Reason | ✅ | +| Rotate Date | ✅ | +| Rotate Generation | ✅ | +| Rotate Interval | ✅ | +| Rotate Latest | ✅ | +| Rotate Name | ✅ | +| Rotate Offset | ✅ | +| Sensitive | ✅ | +| Short Unique Identifier | ✅ | +| State | ✅ | +| Unique Identifier | ✅ | +| Usage Limits | ✅ | +| Vendor Attribute | ✅ | +| X.509 Certificate Identifier | ✅ | +| X.509 Certificate Issuer | ✅ | +| X.509 Certificate Subject | ✅ | Notes: diff --git a/crate/access/Cargo.toml b/crate/access/Cargo.toml index 795e01032..c91a7d3cb 100644 --- a/crate/access/Cargo.toml +++ b/crate/access/Cargo.toml @@ -21,5 +21,5 @@ doctest = false [features] [dependencies] -cosmian_kmip = { path = "../kmip", version = "5.15.0", default-features = true } +cosmian_kmip = { path = "../kmip", version = "5.16.0", default-features = true } serde = { workspace = true } diff --git a/crate/cli/Cargo.toml b/crate/cli/Cargo.toml index 9a8c87499..bec8c686b 100644 --- a/crate/cli/Cargo.toml +++ b/crate/cli/Cargo.toml @@ -43,9 +43,9 @@ clap = { workspace = true, features = [ "cargo", ] } cosmian_config_utils = { workspace = true } -cosmian_kmip = { path = "../kmip", version = "5.15.0" } # only to be reexported, not used directly -cosmian_kms_client = { path = "../kms_client", version = "5.15.0" } -cosmian_kms_crypto = { path = "../crypto", version = "5.15.0" } +cosmian_kmip = { path = "../kmip", version = "5.16.0" } # only to be reexported, not used directly +cosmian_kms_client = { path = "../kms_client", version = "5.16.0" } +cosmian_kms_crypto = { path = "../crypto", version = "5.16.0" } cosmian_logger = { workspace = true } cosmian_crypto_core = { workspace = true, default-features = false } der = { workspace = true, features = ["pem"] } diff --git a/crate/client_utils/Cargo.toml b/crate/client_utils/Cargo.toml index 8a8151146..a30180dc6 100644 --- a/crate/client_utils/Cargo.toml +++ b/crate/client_utils/Cargo.toml @@ -26,8 +26,8 @@ non-fips = ["cosmian_kmip/non-fips"] base64 = { workspace = true } clap = { workspace = true, features = ["std", "derive"] } cosmian_config_utils = { workspace = true } -cosmian_kmip = { path = "../kmip", version = "5.15.0" } -cosmian_kms_access = { path = "../access", version = "5.15.0" } +cosmian_kmip = { path = "../kmip", version = "5.16.0" } +cosmian_kms_access = { path = "../access", version = "5.16.0" } cosmian_logger = { workspace = true } pem = { workspace = true } serde = { workspace = true } diff --git a/crate/crypto/Cargo.toml b/crate/crypto/Cargo.toml index 2f34aca75..af3ac2d1e 100644 --- a/crate/crypto/Cargo.toml +++ b/crate/crypto/Cargo.toml @@ -39,7 +39,7 @@ argon2 = { version = "0.5", optional = true } base64 = { workspace = true } cosmian_cover_crypt = { version = "16.0.0", optional = true } cosmian_crypto_core = { workspace = true, features = ["aes", "sha3"] } -cosmian_kmip = { path = "../kmip", version = "5.15.0" } +cosmian_kmip = { path = "../kmip", version = "5.16.0" } cosmian_logger = { workspace = true } hex = { workspace = true } num-bigint-dig = { workspace = true, features = [ diff --git a/crate/hsm/base_hsm/Cargo.toml b/crate/hsm/base_hsm/Cargo.toml index 4b19ae3cc..96993eeff 100644 --- a/crate/hsm/base_hsm/Cargo.toml +++ b/crate/hsm/base_hsm/Cargo.toml @@ -18,7 +18,7 @@ doctest = false [dependencies] async-trait = { workspace = true } -cosmian_kms_interfaces = { path = "../../interfaces", version = "5.15.0" } +cosmian_kms_interfaces = { path = "../../interfaces", version = "5.16.0" } cosmian_logger = { workspace = true } futures = { workspace = true } libloading = { workspace = true } diff --git a/crate/hsm/crypt2pay/Cargo.toml b/crate/hsm/crypt2pay/Cargo.toml index 77917b4e1..8c6db6541 100644 --- a/crate/hsm/crypt2pay/Cargo.toml +++ b/crate/hsm/crypt2pay/Cargo.toml @@ -17,7 +17,7 @@ workspace = true doctest = false [dependencies] -cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.15.0" } +cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.16.0" } [dev-dependencies] diff --git a/crate/hsm/proteccio/Cargo.toml b/crate/hsm/proteccio/Cargo.toml index f7817657c..3bce66bf5 100644 --- a/crate/hsm/proteccio/Cargo.toml +++ b/crate/hsm/proteccio/Cargo.toml @@ -17,7 +17,7 @@ workspace = true doctest = false [dependencies] -cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.15.0" } +cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.16.0" } [dev-dependencies] diff --git a/crate/hsm/smartcardhsm/Cargo.toml b/crate/hsm/smartcardhsm/Cargo.toml index 824e242e1..948c2d1e6 100644 --- a/crate/hsm/smartcardhsm/Cargo.toml +++ b/crate/hsm/smartcardhsm/Cargo.toml @@ -17,7 +17,7 @@ workspace = true doctest = false [dependencies] -cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.15.0" } +cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.16.0" } [dev-dependencies] libloading = { workspace = true } diff --git a/crate/hsm/softhsm2/Cargo.toml b/crate/hsm/softhsm2/Cargo.toml index 9150f05d2..c06d8092b 100644 --- a/crate/hsm/softhsm2/Cargo.toml +++ b/crate/hsm/softhsm2/Cargo.toml @@ -17,7 +17,7 @@ workspace = true doctest = false [dependencies] -cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.15.0" } +cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.16.0" } [dev-dependencies] libloading = { workspace = true } diff --git a/crate/hsm/utimaco/Cargo.toml b/crate/hsm/utimaco/Cargo.toml index 4bd992151..41222c965 100644 --- a/crate/hsm/utimaco/Cargo.toml +++ b/crate/hsm/utimaco/Cargo.toml @@ -17,7 +17,7 @@ workspace = true doctest = false [dependencies] -cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.15.0" } +cosmian_kms_base_hsm = { path = "../base_hsm", version = "5.16.0" } [dev-dependencies] diff --git a/crate/interfaces/Cargo.toml b/crate/interfaces/Cargo.toml index 2f424d933..992f62d27 100644 --- a/crate/interfaces/Cargo.toml +++ b/crate/interfaces/Cargo.toml @@ -18,7 +18,7 @@ doctest = false [dependencies] async-trait = { workspace = true } -cosmian_kmip = { path = "../kmip", version = "5.15.0" } +cosmian_kmip = { path = "../kmip", version = "5.16.0" } cosmian_logger = { workspace = true } num-bigint-dig = { workspace = true, features = [ "std", diff --git a/crate/kmip/Cargo.toml b/crate/kmip/Cargo.toml index ec613671e..2f8d6fcf0 100644 --- a/crate/kmip/Cargo.toml +++ b/crate/kmip/Cargo.toml @@ -30,7 +30,7 @@ base64 = { workspace = true } bitflags = { workspace = true } cosmian_logger = { workspace = true } hex = { workspace = true, features = ["std"] } -kmip-derive = { path = "../kmip-derive", version = "5.15.0" } +kmip-derive = { path = "../kmip-derive", version = "5.16.0" } leb128 = { workspace = true } num-bigint-dig = { workspace = true, features = [ "std", diff --git a/crate/kms_client/Cargo.toml b/crate/kms_client/Cargo.toml index c3941746a..b9c7e501f 100644 --- a/crate/kms_client/Cargo.toml +++ b/crate/kms_client/Cargo.toml @@ -24,7 +24,7 @@ non-fips = ["cosmian_kms_client_utils/non-fips"] [dependencies] cosmian_crypto_core = { workspace = true } cosmian_http_client = "0.7" -cosmian_kms_client_utils = { path = "../client_utils", version = "5.15.0" } +cosmian_kms_client_utils = { path = "../client_utils", version = "5.16.0" } cosmian_logger = { workspace = true } der = { workspace = true } pem = { workspace = true } diff --git a/crate/server/Cargo.toml b/crate/server/Cargo.toml index 2963797af..99bb75f6c 100644 --- a/crate/server/Cargo.toml +++ b/crate/server/Cargo.toml @@ -70,11 +70,11 @@ clap = { workspace = true, features = [ "derive", "cargo", ] } -cosmian_kms_access = { path = "../access", version = "5.15.0" } -cosmian_kms_base_hsm = { path = "../hsm/base_hsm", version = "5.15.0" } -cosmian_kms_server_database = { path = "../server_database", version = "5.15.0" } +cosmian_kms_access = { path = "../access", version = "5.16.0" } +cosmian_kms_base_hsm = { path = "../hsm/base_hsm", version = "5.16.0" } +cosmian_kms_server_database = { path = "../server_database", version = "5.16.0" } cosmian_logger = { workspace = true, features = ["full"] } -crypt2pay_pkcs11_loader = { path = "../hsm/crypt2pay", version = "5.15.0" } +crypt2pay_pkcs11_loader = { path = "../hsm/crypt2pay", version = "5.16.0" } dotenvy = "0.15" futures = { workspace = true } hex = { workspace = true, features = ["serde"] } @@ -90,7 +90,7 @@ opentelemetry = { workspace = true } opentelemetry-otlp = { workspace = true } opentelemetry_sdk = { workspace = true } pem = { workspace = true } -proteccio_pkcs11_loader = { path = "../hsm/proteccio", version = "5.15.0" } +proteccio_pkcs11_loader = { path = "../hsm/proteccio", version = "5.16.0" } reqwest = { workspace = true, features = [ # Remove "default" which includes rustls "json", @@ -99,8 +99,8 @@ reqwest = { workspace = true, features = [ ] } serde = { workspace = true } serde_json = { workspace = true } -softhsm2_pkcs11_loader = { path = "../hsm/softhsm2", version = "5.15.0" } -smartcardhsm_pkcs11_loader = { path = "../hsm/smartcardhsm", version = "5.15.0" } +softhsm2_pkcs11_loader = { path = "../hsm/softhsm2", version = "5.16.0" } +smartcardhsm_pkcs11_loader = { path = "../hsm/smartcardhsm", version = "5.16.0" } strum = { workspace = true, features = ["std", "derive", "strum_macros"] } thiserror = { workspace = true } time = { workspace = true, features = ["local-offset", "formatting"] } @@ -108,15 +108,15 @@ tokio = { workspace = true, features = ["full"] } toml = "0.8" tracing = { workspace = true } url = { workspace = true } -utimaco_pkcs11_loader = { path = "../hsm/utimaco", version = "5.15.0" } +utimaco_pkcs11_loader = { path = "../hsm/utimaco", version = "5.16.0" } uuid = { workspace = true, features = ["v4"] } x509-parser = { workspace = true } zeroize = { workspace = true } [dev-dependencies] actix-http = "3.10" -cosmian_kms_client_utils = { path = "../client_utils", version = "5.15.0" } -cosmian_kms_interfaces = { path = "../interfaces", version = "5.15.0" } +cosmian_kms_client_utils = { path = "../client_utils", version = "5.16.0" } +cosmian_kms_interfaces = { path = "../interfaces", version = "5.16.0" } native-tls = { workspace = true } pem = { workspace = true } diff --git a/crate/server_database/Cargo.toml b/crate/server_database/Cargo.toml index f1a782a83..bf35a78bd 100644 --- a/crate/server_database/Cargo.toml +++ b/crate/server_database/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "cosmian_kms_server_database" -version = "5.15.0" +version = "5.16.0" authors.workspace = true categories.workspace = true edition.workspace = true @@ -30,9 +30,9 @@ interop = ["cosmian_kmip/interop"] [dependencies] async-trait = { workspace = true } -cosmian_kmip = { path = "../kmip", version = "5.15.0" } -cosmian_kms_crypto = { path = "../crypto", version = "5.15.0" } -cosmian_kms_interfaces = { path = "../interfaces", version = "5.15.0" } +cosmian_kmip = { path = "../kmip", version = "5.16.0" } +cosmian_kms_crypto = { path = "../crypto", version = "5.16.0" } +cosmian_kms_interfaces = { path = "../interfaces", version = "5.16.0" } cosmian_findex = { version = "8.0.2", optional = true } cosmian_logger = { workspace = true } cosmian_sse_memories = { version = "8.0.2", optional = true } diff --git a/crate/test_kms_server/Cargo.toml b/crate/test_kms_server/Cargo.toml index 73273a00c..5756d6084 100644 --- a/crate/test_kms_server/Cargo.toml +++ b/crate/test_kms_server/Cargo.toml @@ -27,10 +27,10 @@ harness = false [dependencies] actix-server = { workspace = true } -cosmian_kms_client = { path = "../kms_client", version = "5.15.0" } +cosmian_kms_client = { path = "../kms_client", version = "5.16.0" } cosmian_kms_server = { path = "../server", features = [ "insecure", -], version = "5.15.0" } +], version = "5.16.0" } cosmian_logger = { workspace = true } serde_json = { workspace = true } time = { workspace = true } diff --git a/crate/wasm/Cargo.toml b/crate/wasm/Cargo.toml index 5eef16fc1..b70bb03e0 100644 --- a/crate/wasm/Cargo.toml +++ b/crate/wasm/Cargo.toml @@ -26,7 +26,7 @@ default = ["getrandom/js"] [dependencies] base64 = { workspace = true } -cosmian_kms_client_utils = { path = "../client_utils", version = "5.15.0" } +cosmian_kms_client_utils = { path = "../client_utils", version = "5.16.0" } getrandom = { version = "0.2", features = ["js"], optional = true } js-sys = "0.3.77" pem = { workspace = true } diff --git a/documentation/docs/fips.md b/documentation/docs/fips.md index fff8f3224..b3c777db9 100644 --- a/documentation/docs/fips.md +++ b/documentation/docs/fips.md @@ -16,7 +16,7 @@ The OpenSSL FIPS provider is certified under when used on Red Hat Enterprise Linux 9 (RHEL 9) Cosmian -produces [pre-built Ubuntu 22.04 FIPS mode binaries](https://package.cosmian.com/kms/5.15.0/ubuntu-22.04/) +produces [pre-built Debian based Linux packages](https://package.cosmian.com/kms/5.16.0/deb/) and docker containers of the KMS (on gcr.io). By default, the Cosmian KMS is built with FIPS compliance enabled. diff --git a/documentation/docs/index.md b/documentation/docs/index.md index d3c0523ed..ccaeb46df 100644 --- a/documentation/docs/index.md +++ b/documentation/docs/index.md @@ -66,9 +66,9 @@ See the complete [supported algorithms list](./algorithms.md). The **Cosmian KMS** is available as: -- Linux packages: [Debian](https://package.cosmian.com/kms/5.15.0/debian/) or [RPM](https://package.cosmian.com/kms/5.15.0/rpm/) -- Windows installer: [Windows](https://package.cosmian.com/kms/5.15.0/windows/) -- macOS installer: [macOS](https://package.cosmian.com/kms/5.15.0/dmg/) +- Linux packages: [Debian](https://package.cosmian.com/kms/5.16.0/debian/) or [RPM](https://package.cosmian.com/kms/5.16.0/rpm/) +- Windows installer: [Windows](https://package.cosmian.com/kms/5.16.0/windows/) +- macOS installer: [macOS](https://package.cosmian.com/kms/5.16.0/dmg/) - Docker: [Standard image](https://github.com/Cosmian/kms/pkgs/container/kms) and [FIPS image](https://github.com/Cosmian/kms/pkgs/container/kms) ## User Interface @@ -84,5 +84,5 @@ The [Cosmian CLI](../cosmian_cli/index.md) provides a powerful command-line inte The **[Cosmian CLI](../cosmian_cli/index.md)** is packaged as: -- [Debian](https://package.cosmian.com/kms/5.15.0/ubuntu-22.04/) or [RPM](https://package.cosmian.com/kms/5.15.0/rockylinux9/) package +- [Debian](https://package.cosmian.com/kms/5.16.0/ubuntu-22.04/) or [RPM](https://package.cosmian.com/kms/5.16.0/rockylinux9/) package - [Pre-built binaries](https://package.cosmian.com/cli/) for Linux, Windows, and macOS diff --git a/documentation/docs/installation/installation_getting_started.md b/documentation/docs/installation/installation_getting_started.md index a66552402..3c275ccd4 100644 --- a/documentation/docs/installation/installation_getting_started.md +++ b/documentation/docs/installation/installation_getting_started.md @@ -58,16 +58,16 @@ For high availability and scalability, refer to the [High Availability Guide](./ ```sh sudo apt update && sudo apt install -y wget # Standard build (non-FIPS, static OpenSSL) - wget https://package.cosmian.com/kms/5.15.0/deb/amd64/non-fips/static/cosmian-kms-server-non-fips-static-openssl_5.15.0_amd64.deb - sudo apt install ./cosmian-kms-server-non-fips-static-openssl_5.15.0_amd64.deb + wget https://package.cosmian.com/kms/5.16.0/deb/amd64/non-fips/static/cosmian-kms-server-non-fips-static-openssl_5.16.0_amd64.deb + sudo apt install ./cosmian-kms-server-non-fips-static-openssl_5.16.0_amd64.deb sudo cosmian_kms --version ``` Or install the FIPS build: ```sh - wget https://package.cosmian.com/kms/5.15.0/deb/amd64/fips/static/cosmian-kms-server-fips-static-openssl_5.15.0_amd64.deb - sudo apt install ./cosmian-kms-server-fips-static-openssl_5.15.0_amd64.deb + wget https://package.cosmian.com/kms/5.16.0/deb/amd64/fips/static/cosmian-kms-server-fips-static-openssl_5.16.0_amd64.deb + sudo apt install ./cosmian-kms-server-fips-static-openssl_5.16.0_amd64.deb sudo cosmian_kms --version ``` @@ -87,8 +87,8 @@ For high availability and scalability, refer to the [High Availability Guide](./ ```sh sudo dnf update && sudo dnf install -y wget - wget https://package.cosmian.com/kms/5.15.0/rpm/amd64/non-fips/static/cosmian-kms-server-non-fips-static-openssl_5.15.0_x86_64.rpm - sudo dnf install ./cosmian-kms-server-non-fips-static-openssl_5.15.0_x86_64.rpm + wget https://package.cosmian.com/kms/5.16.0/rpm/amd64/non-fips/static/cosmian-kms-server-non-fips-static-openssl_5.16.0_x86_64.rpm + sudo dnf install ./cosmian-kms-server-non-fips-static-openssl_5.16.0_x86_64.rpm sudo cosmian_kms --version ``` @@ -108,12 +108,12 @@ For high availability and scalability, refer to the [High Availability Guide](./ - Apple Silicon (ARM64): ```sh - open "https://package.cosmian.com/kms/5.15.0/dmg/arm64/non-fips/static/cosmian-kms-server-non-fips-static-openssl-5.15.0_arm64.dmg" + open "https://package.cosmian.com/kms/5.16.0/dmg/arm64/non-fips/static/cosmian-kms-server-non-fips-static-openssl-5.16.0_arm64.dmg" ``` Then drag-and-drop the app to Applications or follow the DMG instructions. - Note: The 5.15.0 DMG is provided for Apple Silicon (ARM64). + Note: The 5.16.0 DMG is provided for Apple Silicon (ARM64). After installation, run: @@ -134,18 +134,18 @@ Available dynamic packages for Debian-based distributions: ```sh # Non-FIPS dynamic (OpenSSL linked dynamically) - wget https://package.cosmian.com/kms/5.15.0/deb/amd64/non-fips/dynamic/cosmian-kms-server-non-fips-dynamic-openssl_5.15.0_amd64.deb + wget https://package.cosmian.com/kms/5.16.0/deb/amd64/non-fips/dynamic/cosmian-kms-server-non-fips-dynamic-openssl_5.16.0_amd64.deb # FIPS dynamic - wget https://package.cosmian.com/kms/5.15.0/deb/amd64/fips/dynamic/cosmian-kms-server-fips-dynamic-openssl_5.15.0_amd64.deb + wget https://package.cosmian.com/kms/5.16.0/deb/amd64/fips/dynamic/cosmian-kms-server-fips-dynamic-openssl_5.16.0_amd64.deb ``` Available dynamic packages for Rocky Linux: ```sh # Non-FIPS dynamic - wget https://package.cosmian.com/kms/5.15.0/rpm/amd64/non-fips/dynamic/cosmian-kms-server-non-fips-dynamic-openssl_5.15.0_x86_64.rpm + wget https://package.cosmian.com/kms/5.16.0/rpm/amd64/non-fips/dynamic/cosmian-kms-server-non-fips-dynamic-openssl_5.16.0_x86_64.rpm # FIPS dynamic - wget https://package.cosmian.com/kms/5.15.0/rpm/amd64/fips/dynamic/cosmian-kms-server-fips-dynamic-openssl_5.15.0_x86_64.rpm + wget https://package.cosmian.com/kms/5.16.0/rpm/amd64/fips/dynamic/cosmian-kms-server-fips-dynamic-openssl_5.16.0_x86_64.rpm ``` To use custom OpenSSL with dynamic builds, install or place the desired OpenSSL @@ -156,7 +156,7 @@ shared libraries here: `/usr/local/cosmian/lib/ossl-modules`. On Windows, download the NSIS installer: ```sh - https://package.cosmian.com/kms/5.15.0/windows/x86_64/non-fips/static-openssl/cosmian-kms-server-non-fips-static-openssl_5.15.0_x86_64.exe + https://package.cosmian.com/kms/5.16.0/windows/x86_64/non-fips/static-openssl/cosmian-kms-server-non-fips-static-openssl_5.16.0_x86_64.exe ``` Run the installer to install Cosmian KMS Server. The installer will: diff --git a/documentation/docs/installation/marketplace_guide.md b/documentation/docs/installation/marketplace_guide.md index 81291923f..28f33a27d 100644 --- a/documentation/docs/installation/marketplace_guide.md +++ b/documentation/docs/installation/marketplace_guide.md @@ -146,7 +146,7 @@ journalctl -u cosmian_vm_agent ```console $ curl --insecure https://${COSMIAN_VM_IP_ADDR}/version -"5.15.0" +"5.16.0" ``` !!! info "Why `--allow-insecure-tls` and `--insecure` flags?" diff --git a/nix/expected-hashes/server.vendor.dynamic.darwin.sha256 b/nix/expected-hashes/server.vendor.dynamic.darwin.sha256 index ee18c7d46..0305183ad 100644 --- a/nix/expected-hashes/server.vendor.dynamic.darwin.sha256 +++ b/nix/expected-hashes/server.vendor.dynamic.darwin.sha256 @@ -1 +1 @@ -sha256-VOviS9AGurZ+lTQBq4Qp8GobQAlEd0ngaVnK3q/jStU= +sha256-+DYJfXhD2Giyl2o1uxR25ROA53OAJJNna9qqVKAVZI4= diff --git a/nix/expected-hashes/server.vendor.dynamic.linux.sha256 b/nix/expected-hashes/server.vendor.dynamic.linux.sha256 index ee18c7d46..0305183ad 100644 --- a/nix/expected-hashes/server.vendor.dynamic.linux.sha256 +++ b/nix/expected-hashes/server.vendor.dynamic.linux.sha256 @@ -1 +1 @@ -sha256-VOviS9AGurZ+lTQBq4Qp8GobQAlEd0ngaVnK3q/jStU= +sha256-+DYJfXhD2Giyl2o1uxR25ROA53OAJJNna9qqVKAVZI4= diff --git a/nix/expected-hashes/server.vendor.static.darwin.sha256 b/nix/expected-hashes/server.vendor.static.darwin.sha256 index 35544054d..0cedc69a8 100644 --- a/nix/expected-hashes/server.vendor.static.darwin.sha256 +++ b/nix/expected-hashes/server.vendor.static.darwin.sha256 @@ -1 +1 @@ -sha256-joXkoZXq7sd9ZsrsFl+u3OoWgrxeo6P5ZnnRCIhIc+Y= +sha256-V5+NHKyip12NH/r/YEf93D7WheAjLmcCnRwvDCay1Xo= diff --git a/nix/expected-hashes/server.vendor.static.linux.sha256 b/nix/expected-hashes/server.vendor.static.linux.sha256 index 35544054d..0cedc69a8 100644 --- a/nix/expected-hashes/server.vendor.static.linux.sha256 +++ b/nix/expected-hashes/server.vendor.static.linux.sha256 @@ -1 +1 @@ -sha256-joXkoZXq7sd9ZsrsFl+u3OoWgrxeo6P5ZnnRCIhIc+Y= +sha256-V5+NHKyip12NH/r/YEf93D7WheAjLmcCnRwvDCay1Xo= diff --git a/nix/expected-hashes/ui.npm.sha256 b/nix/expected-hashes/ui.npm.sha256 index 6c719cf8a..71b1b6f13 100644 --- a/nix/expected-hashes/ui.npm.sha256 +++ b/nix/expected-hashes/ui.npm.sha256 @@ -1 +1 @@ -sha256-Rt1T63aVW+FUnt0U2vJ4Rm6VEKR+ydJjZcdI/1FP/fk= +sha256-IPpS9UIY6okvQnBzY4baucZdjYI/+1T1AEKvCuznxbw= diff --git a/nix/expected-hashes/ui.vendor.fips.sha256 b/nix/expected-hashes/ui.vendor.fips.sha256 index 60ba50e8b..346dd6ec2 100644 --- a/nix/expected-hashes/ui.vendor.fips.sha256 +++ b/nix/expected-hashes/ui.vendor.fips.sha256 @@ -1 +1 @@ -sha256-ivbjRXYSny5G7dJWLpD4whpQS5WU8E/3G31GPzM18fE= +sha256-JkEdNhGqWv+725oQpBn7j4tpF7KHsOcPD+7mR2c7A3c= diff --git a/nix/expected-hashes/ui.vendor.non-fips.sha256 b/nix/expected-hashes/ui.vendor.non-fips.sha256 index 3cc1420cb..1c0e930e7 100644 --- a/nix/expected-hashes/ui.vendor.non-fips.sha256 +++ b/nix/expected-hashes/ui.vendor.non-fips.sha256 @@ -1 +1 @@ -sha256-by3J2vhfl2iZg/Cvmdcxuf7GLZvbOi6TobAxhQAffog= +sha256-Mrj/N3GNtZtH+SqKqJdYh4hTgmBKN7tEp3OZGMwTHGI= diff --git a/sbom/openssl/bom.cdx.json b/sbom/openssl/bom.cdx.json index 13554147e..e6583e4cc 100644 --- a/sbom/openssl/bom.cdx.json +++ b/sbom/openssl/bom.cdx.json @@ -2,9 +2,9 @@ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, - "serialNumber": "urn:uuid:f497ef10-ffa6-434c-aada-c01bed2b02e6", + "serialNumber": "urn:uuid:3d33ee63-0ee0-4ba0-b718-473baaadbeca", "metadata": { - "timestamp": "2026-02-12T07:12:46.108143+01:00", + "timestamp": "2026-02-15T08:53:29.929723+01:00", "properties": [ { "name": "sbom_type", @@ -15,12 +15,12 @@ { "vendor": "TII", "name": "sbomnix", - "version": "1.7.3" + "version": "1.7.4" } ], "component": { "type": "library", - "bom-ref": "/nix/store/crzlbjvcnf843yy99icdf6dgbzfhrn8w-openssl-3.1.2.drv", + "bom-ref": "/nix/store/88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv", "name": "openssl", "version": "3.1.2", "purl": "pkg:nix/openssl@3.1.2", @@ -28,92 +28,19 @@ "properties": [ { "name": "nix:output_path", - "value": "/nix/store/jp0by8s94570i76bxgx30j941kx7c3jv-openssl-3.1.2" + "value": "/nix/store/wxvknmscghfnn6xfnxayn0gsrs01cd0c-openssl-3.1.2" }, { "name": "nix:drv_path", - "value": "/nix/store/crzlbjvcnf843yy99icdf6dgbzfhrn8w-openssl-3.1.2.drv" + "value": "/nix/store/88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv" } ] } }, - "components": [ - { - "type": "library", - "bom-ref": "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", - "name": "glibc", - "version": "2.34-210", - "purl": "pkg:nix/glibc@2.34-210", - "cpe": "cpe:2.3:a:glibc:glibc:2.34-210:*:*:*:*:*:*:*", - "properties": [ - { - "name": "nix:output_path", - "value": "/nix/store/b2hc0i92l22ir2kavnjn3z5z6mzabbvm-glibc-2.34-210" - }, - { - "name": "nix:drv_path", - "value": "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" - } - ] - }, - { - "type": "library", - "bom-ref": "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", - "name": "libidn2", - "version": "2.3.2", - "purl": "pkg:nix/libidn2@2.3.2", - "cpe": "cpe:2.3:a:gnu:libidn2:2.3.2:*:*:*:*:*:*:*", - "properties": [ - { - "name": "nix:output_path", - "value": "/nix/store/9jqiw71lq60sdpiniywq3msknf3wmd9c-libidn2-2.3.2" - }, - { - "name": "nix:drv_path", - "value": "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv" - } - ] - }, - { - "type": "library", - "bom-ref": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv", - "name": "libunistring", - "version": "1.0", - "purl": "pkg:nix/libunistring@1.0", - "cpe": "cpe:2.3:a:libunistring:libunistring:1.0:*:*:*:*:*:*:*", - "properties": [ - { - "name": "nix:output_path", - "value": "/nix/store/gfqwbax0x58mjnh89ca6milx41bw49lr-libunistring-1.0" - }, - { - "name": "nix:drv_path", - "value": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" - } - ] - } - ], + "components": [], "dependencies": [ { - "ref": "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", - "dependsOn": [ - "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv" - ] - }, - { - "ref": "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", - "dependsOn": [ - "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" - ] - }, - { - "ref": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" - }, - { - "ref": "/nix/store/crzlbjvcnf843yy99icdf6dgbzfhrn8w-openssl-3.1.2.drv", - "dependsOn": [ - "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" - ] + "ref": "/nix/store/88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv" } ] } diff --git a/sbom/openssl/bom.spdx.json b/sbom/openssl/bom.spdx.json index d90a1a330..aefdae4a0 100644 --- a/sbom/openssl/bom.spdx.json +++ b/sbom/openssl/bom.spdx.json @@ -2,82 +2,19 @@ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", - "name": "SPDXRef-nix-store-crzlbjvcnf843yy99icdf6dgbzfhrn8w-openssl-3.1.2.drv", - "documentNamespace": "sbomnix://ba64a1be-6ce1-4d1d-b02c-ce429be62673", + "name": "SPDXRef-nix-store-88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv", + "documentNamespace": "sbomnix://39fa90cb-0b1e-4dc5-84ea-f90613ac3006", "creationInfo": { - "created": "2026-02-12T07:12:46.772063+01:00", + "created": "2026-02-15T08:53:31.130779+01:00", "creators": [ - "Tool: sbomnix-1.7.3" + "Tool: sbomnix-1.7.4" ] }, "comment": "included dependencies: 'runtime_only'", "packages": [ - { - "name": "glibc", - "SPDXID": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", - "versionInfo": "2.34-210", - "downloadLocation": "NOASSERTION", - "licenseConcluded": "NOASSERTION", - "licenseDeclared": "NOASSERTION", - "copyrightText": "NOASSERTION", - "externalRefs": [ - { - "referenceCategory": "SECURITY", - "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:glibc:glibc:2.34-210:*:*:*:*:*:*:*" - }, - { - "referenceCategory": "PACKAGE-MANAGER", - "referenceType": "purl", - "referenceLocator": "pkg:nix/glibc@2.34-210" - } - ] - }, - { - "name": "libidn2", - "SPDXID": "SPDXRef-nix-store-k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", - "versionInfo": "2.3.2", - "downloadLocation": "NOASSERTION", - "licenseConcluded": "NOASSERTION", - "licenseDeclared": "NOASSERTION", - "copyrightText": "NOASSERTION", - "externalRefs": [ - { - "referenceCategory": "SECURITY", - "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:gnu:libidn2:2.3.2:*:*:*:*:*:*:*" - }, - { - "referenceCategory": "PACKAGE-MANAGER", - "referenceType": "purl", - "referenceLocator": "pkg:nix/libidn2@2.3.2" - } - ] - }, - { - "name": "libunistring", - "SPDXID": "SPDXRef-nix-store-f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv", - "versionInfo": "1.0", - "downloadLocation": "NOASSERTION", - "licenseConcluded": "NOASSERTION", - "licenseDeclared": "NOASSERTION", - "copyrightText": "NOASSERTION", - "externalRefs": [ - { - "referenceCategory": "SECURITY", - "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:libunistring:libunistring:1.0:*:*:*:*:*:*:*" - }, - { - "referenceCategory": "PACKAGE-MANAGER", - "referenceType": "purl", - "referenceLocator": "pkg:nix/libunistring@1.0" - } - ] - }, { "name": "openssl", - "SPDXID": "SPDXRef-nix-store-crzlbjvcnf843yy99icdf6dgbzfhrn8w-openssl-3.1.2.drv", + "SPDXID": "SPDXRef-nix-store-88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv", "versionInfo": "3.1.2", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", @@ -97,21 +34,5 @@ ] } ], - "relationships": [ - { - "spdxElementId": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", - "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-nix-store-k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv" - }, - { - "spdxElementId": "SPDXRef-nix-store-k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", - "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-nix-store-f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" - }, - { - "spdxElementId": "SPDXRef-nix-store-crzlbjvcnf843yy99icdf6dgbzfhrn8w-openssl-3.1.2.drv", - "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" - } - ] + "relationships": [] } diff --git a/sbom/openssl/meta.json b/sbom/openssl/meta.json index adf43a9c2..86770157c 100644 --- a/sbom/openssl/meta.json +++ b/sbom/openssl/meta.json @@ -3,15 +3,15 @@ "build": { "variant": "fips", "derivation": "openssl312", - "output_path": "/nix/store/jp0by8s94570i76bxgx30j941kx7c3jv-openssl-3.1.2", - "timestamp": "2026-02-12T06:13:04Z", + "output_path": "/nix/store/wxvknmscghfnn6xfnxayn0gsrs01cd0c-openssl-3.1.2", + "timestamp": "2026-02-15T07:54:17Z", "generator": { "tool": "sbomnix", - "version": "1.7.3" + "version": "1.7.4" } }, - "component_count": 4, - "vulnerability_count": 360, + "component_count": 1, + "vulnerability_count": 13, "notes": [ "SBOM targets the OpenSSL derivation itself", "All dependencies are from Nix store with pinned versions", diff --git a/sbom/openssl/vulns.csv b/sbom/openssl/vulns.csv index 75f87c97f..9bf97c50e 100644 --- a/sbom/openssl/vulns.csv +++ b/sbom/openssl/vulns.csv @@ -1,361 +1,14 @@ "vuln_id","url","package","version_local","severity","grype","osv","vulnix","sum","sortcol" -"RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"USN-7980-1","https://osv.dev/USN-7980-1","openssl","3.1.2","","0","1","0","1","2026A1770681600" -"USN-6409-1","https://osv.dev/USN-6409-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-6541-1","https://osv.dev/USN-6541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-6541-2","https://osv.dev/USN-6541-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-6737-1","https://osv.dev/USN-6737-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-6737-2","https://osv.dev/USN-6737-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-6804-1","https://osv.dev/USN-6804-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-7259-1","https://osv.dev/USN-7259-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-7541-1","https://osv.dev/USN-7541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-7634-1","https://osv.dev/USN-7634-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-7760-1","https://osv.dev/USN-7760-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"USN-8005-1","https://osv.dev/USN-8005-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770595200" -"CGA-4r5h-8hvp-w6xm","https://osv.dev/CGA-4r5h-8hvp-w6xm","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"CGA-9vjv-2q8r-rw73","https://osv.dev/CGA-9vjv-2q8r-rw73","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2021:1024","https://osv.dev/RLSA-2021:1024","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2021:5226","https://osv.dev/RLSA-2021:5226","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2022:1065","https://osv.dev/RLSA-2022:1065","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2022:7288","https://osv.dev/RLSA-2022:7288","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2023:0946","https://osv.dev/RLSA-2023:0946","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2023:1405","https://osv.dev/RLSA-2023:1405","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"RLSA-2024:6783","https://osv.dev/RLSA-2024:6783","openssl","3.1.2","","0","1","0","1","2026A1770249600" -"ALSA-2022:1065","https://osv.dev/ALSA-2022:1065","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2022:5818","https://osv.dev/ALSA-2022:5818","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2022:6224","https://osv.dev/ALSA-2022:6224","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2022:7288","https://osv.dev/ALSA-2022:7288","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2023:0946","https://osv.dev/ALSA-2023:0946","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2023:1405","https://osv.dev/ALSA-2023:1405","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2023:2523","https://osv.dev/ALSA-2023:2523","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2023:3722","https://osv.dev/ALSA-2023:3722","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2023:7877","https://osv.dev/ALSA-2023:7877","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2024:0310","https://osv.dev/ALSA-2024:0310","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2024:2447","https://osv.dev/ALSA-2024:2447","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2024:6783","https://osv.dev/ALSA-2024:6783","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2024:7848","https://osv.dev/ALSA-2024:7848","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2024:9333","https://osv.dev/ALSA-2024:9333","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2025:1330","https://osv.dev/ALSA-2025:1330","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2025:21248","https://osv.dev/ALSA-2025:21248","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2025:21255","https://osv.dev/ALSA-2025:21255","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2026:0337","https://osv.dev/ALSA-2026:0337","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2026:1472","https://osv.dev/ALSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2026:1473","https://osv.dev/ALSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-23jc-cp93-m38q","https://osv.dev/CGA-23jc-cp93-m38q","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-3349-gw4v-v75q","https://osv.dev/CGA-3349-gw4v-v75q","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-3564-hcr3-rwcx","https://osv.dev/CGA-3564-hcr3-rwcx","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-3j72-vx7g-q9jf","https://osv.dev/CGA-3j72-vx7g-q9jf","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-5h8h-83x5-5c7f","https://osv.dev/CGA-5h8h-83x5-5c7f","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-62vj-r9x6-x394","https://osv.dev/CGA-62vj-r9x6-x394","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-6j5g-x524-ppqj","https://osv.dev/CGA-6j5g-x524-ppqj","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-7gc4-88j6-9pgg","https://osv.dev/CGA-7gc4-88j6-9pgg","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-92vg-cvc9-fcwm","https://osv.dev/CGA-92vg-cvc9-fcwm","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-97mc-5jrp-289h","https://osv.dev/CGA-97mc-5jrp-289h","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-98cj-65vp-55vg","https://osv.dev/CGA-98cj-65vp-55vg","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-9hqf-jc89-w38w","https://osv.dev/CGA-9hqf-jc89-w38w","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-c79m-3cvx-p3fj","https://osv.dev/CGA-c79m-3cvx-p3fj","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-f7hh-h68c-h67j","https://osv.dev/CGA-f7hh-h68c-h67j","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-g724-hp8h-w4q3","https://osv.dev/CGA-g724-hp8h-w4q3","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-gg8h-2f2r-7qx4","https://osv.dev/CGA-gg8h-2f2r-7qx4","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-grh5-h34q-5f38","https://osv.dev/CGA-grh5-h34q-5f38","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-h2rf-gww3-5hm6","https://osv.dev/CGA-h2rf-gww3-5hm6","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-jw8r-q3r6-737x","https://osv.dev/CGA-jw8r-q3r6-737x","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-mfvr-g9cv-vw4q","https://osv.dev/CGA-mfvr-g9cv-vw4q","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-mr6w-v7h5-px4g","https://osv.dev/CGA-mr6w-v7h5-px4g","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-pf9v-45gc-f4gq","https://osv.dev/CGA-pf9v-45gc-f4gq","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-pg2x-phcw-gc86","https://osv.dev/CGA-pg2x-phcw-gc86","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-r7x6-2r6m-2rpf","https://osv.dev/CGA-r7x6-2r6m-2rpf","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"CGA-wggh-4hqr-p82f","https://osv.dev/CGA-wggh-4hqr-p82f","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHBA-2025:6314","https://osv.dev/RHBA-2025:6314","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2024:6783","https://osv.dev/RHSA-2024:6783","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2024:7846","https://osv.dev/RHSA-2024:7846","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2024:7847","https://osv.dev/RHSA-2024:7847","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2024:7848","https://osv.dev/RHSA-2024:7848","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2024:9333","https://osv.dev/RHSA-2024:9333","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:1330","https://osv.dev/RHSA-2025:1330","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:21174","https://osv.dev/RHSA-2025:21174","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:21248","https://osv.dev/RHSA-2025:21248","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:21255","https://osv.dev/RHSA-2025:21255","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:21562","https://osv.dev/RHSA-2025:21562","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:22794","https://osv.dev/RHSA-2025:22794","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2025:3666","https://osv.dev/RHSA-2025:3666","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:0337","https://osv.dev/RHSA-2026:0337","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:0602","https://osv.dev/RHSA-2026:0602","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:0714","https://osv.dev/RHSA-2026:0714","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:0887","https://osv.dev/RHSA-2026:0887","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:1349","https://osv.dev/RHSA-2026:1349","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:1475","https://osv.dev/RHSA-2026:1475","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RHSA-2026:1720","https://osv.dev/RHSA-2026:1720","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RLSA-2021:4424","https://osv.dev/RLSA-2021:4424","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RLSA-2022:5818","https://osv.dev/RLSA-2022:5818","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RLSA-2024:7848","https://osv.dev/RLSA-2024:7848","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"RLSA-2024:9333","https://osv.dev/RLSA-2024:9333","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"USN-7264-1","https://osv.dev/USN-7264-1","openssl","3.1.2","","0","1","0","1","2026A1770163200" -"ALSA-2026:1334","https://osv.dev/ALSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"SUSE-SU-2025:01702-2","https://osv.dev/SUSE-SU-2025:01702-2","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"SUSE-SU-2026:0371-1","https://osv.dev/SUSE-SU-2026:0371-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"USN-6620-1","https://osv.dev/USN-6620-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:12316-1","https://osv.dev/openSUSE-SU-2024:12316-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13123-1","https://osv.dev/openSUSE-SU-2024:13123-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13273-1","https://osv.dev/openSUSE-SU-2024:13273-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13294-1","https://osv.dev/openSUSE-SU-2024:13294-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13388-1","https://osv.dev/openSUSE-SU-2024:13388-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13647-1","https://osv.dev/openSUSE-SU-2024:13647-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13877-1","https://osv.dev/openSUSE-SU-2024:13877-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13935-1","https://osv.dev/openSUSE-SU-2024:13935-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2024:13991-1","https://osv.dev/openSUSE-SU-2024:13991-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"openSUSE-SU-2025:14851-1","https://osv.dev/openSUSE-SU-2025:14851-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" -"MINI-646c-qwjc-fhrr","https://osv.dev/MINI-646c-qwjc-fhrr","openssl","3.1.2","","0","1","0","1","2026A1770076800" -"MINI-vq8c-vrvw-h2g8","https://osv.dev/MINI-vq8c-vrvw-h2g8","openssl","3.1.2","","0","1","0","1","2026A1770076800" -"RLSA-2026:1472","https://osv.dev/RLSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1769731200" -"RLSA-2026:1473","https://osv.dev/RLSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1769731200" -"RLSA-2026:1334","https://osv.dev/RLSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1769731200" -"ECHO-0529-49f7-34d9","https://osv.dev/ECHO-0529-49f7-34d9","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-0e8b-e5b4-4661","https://osv.dev/ECHO-0e8b-e5b4-4661","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-1956-f8c5-351f","https://osv.dev/ECHO-1956-f8c5-351f","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-29d0-be66-1d36","https://osv.dev/ECHO-29d0-be66-1d36","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-2c1d-6266-fce5","https://osv.dev/ECHO-2c1d-6266-fce5","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-3df5-a3a2-6763","https://osv.dev/ECHO-3df5-a3a2-6763","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-7300-0df7-ef21","https://osv.dev/ECHO-7300-0df7-ef21","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-b2f7-5a6b-fae1","https://osv.dev/ECHO-b2f7-5a6b-fae1","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-decb-8594-a95c","https://osv.dev/ECHO-decb-8594-a95c","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-f3f1-7685-1435","https://osv.dev/ECHO-f3f1-7685-1435","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-5fwx-pgcg-m63x","https://osv.dev/MINI-5fwx-pgcg-m63x","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-65xw-w3w7-rq9j","https://osv.dev/MINI-65xw-w3w7-rq9j","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-7xm6-82wh-gj9f","https://osv.dev/MINI-7xm6-82wh-gj9f","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-f9qm-gx9g-pp9f","https://osv.dev/MINI-f9qm-gx9g-pp9f","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-h554-5xj6-wrxh","https://osv.dev/MINI-h554-5xj6-wrxh","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-mgc9-4rpq-57xp","https://osv.dev/MINI-mgc9-4rpq-57xp","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-mp2m-wjv9-45g9","https://osv.dev/MINI-mp2m-wjv9-45g9","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-mxh7-mw93-fg88","https://osv.dev/MINI-mxh7-mw93-fg88","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-qg2w-mv6w-hjxw","https://osv.dev/MINI-qg2w-mv6w-hjxw","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"MINI-rj3h-gp23-63xh","https://osv.dev/MINI-rj3h-gp23-63xh","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"RHSA-2014:0679","https://osv.dev/RHSA-2014:0679","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"RHSA-2014:1052","https://osv.dev/RHSA-2014:1052","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"RHSA-2014:1652","https://osv.dev/RHSA-2014:1652","openssl","3.1.2","","0","1","0","1","2026A1769644800" -"ECHO-086f-bae8-9025","https://osv.dev/ECHO-086f-bae8-9025","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-3bf9-421a-e851","https://osv.dev/ECHO-3bf9-421a-e851","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-41bb-7a34-940a","https://osv.dev/ECHO-41bb-7a34-940a","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-5e35-7adb-017f","https://osv.dev/ECHO-5e35-7adb-017f","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-610e-0187-d683","https://osv.dev/ECHO-610e-0187-d683","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-73b4-18bf-fe4a","https://osv.dev/ECHO-73b4-18bf-fe4a","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-9177-1522-4a81","https://osv.dev/ECHO-9177-1522-4a81","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-9557-5d0c-3a13","https://osv.dev/ECHO-9557-5d0c-3a13","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-b945-0d83-4498","https://osv.dev/ECHO-b945-0d83-4498","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-bbe7-403a-c07e","https://osv.dev/ECHO-bbe7-403a-c07e","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-c300-439c-0dda","https://osv.dev/ECHO-c300-439c-0dda","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-e3dc-79c7-c66d","https://osv.dev/ECHO-e3dc-79c7-c66d","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"ECHO-fb54-b1c2-328f","https://osv.dev/ECHO-fb54-b1c2-328f","glibc","2.34-210","","0","1","0","1","2026A1769644800" -"RHSA-2016:1940","https://osv.dev/RHSA-2016:1940","openssl","3.1.2","","0","1","0","1","2026A1769558400" -"DSA-6113-1","https://osv.dev/DSA-6113-1","openssl","3.1.2","","0","1","0","1","2026A1769472000" -"RHSA-2023:3722","https://osv.dev/RHSA-2023:3722","openssl","3.1.2","","0","1","0","1","2026A1769126400" -"RHSA-2022:5818","https://osv.dev/RHSA-2022:5818","openssl","3.1.2","","0","1","0","1","2026A1769040000" -"RHSA-2022:6224","https://osv.dev/RHSA-2022:6224","openssl","3.1.2","","0","1","0","1","2026A1769040000" -"RHSA-2023:0946","https://osv.dev/RHSA-2023:0946","openssl","3.1.2","","0","1","0","1","2026A1769040000" -"RHSA-2023:1199","https://osv.dev/RHSA-2023:1199","openssl","3.1.2","","0","1","0","1","2026A1769040000" -"RHSA-2023:1405","https://osv.dev/RHSA-2023:1405","openssl","3.1.2","","0","1","0","1","2026A1769040000" -"RHSA-2023:3408","https://osv.dev/RHSA-2023:3408","openssl","3.1.2","","0","1","0","1","2026A1769040000" -"RHSA-2025:13240","https://osv.dev/RHSA-2025:13240","glibc","2.34-210","","0","1","0","1","2026A1769040000" -"RHSA-2021:3798","https://osv.dev/RHSA-2021:3798","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2021:4424","https://osv.dev/RHSA-2021:4424","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2021:5226","https://osv.dev/RHSA-2021:5226","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:0064","https://osv.dev/RHSA-2022:0064","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1065","https://osv.dev/RHSA-2022:1065","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1066","https://osv.dev/RHSA-2022:1066","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1071","https://osv.dev/RHSA-2022:1071","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1076","https://osv.dev/RHSA-2022:1076","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1077","https://osv.dev/RHSA-2022:1077","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1078","https://osv.dev/RHSA-2022:1078","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1082","https://osv.dev/RHSA-2022:1082","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1091","https://osv.dev/RHSA-2022:1091","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RHSA-2022:1112","https://osv.dev/RHSA-2022:1112","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"RLSA-2026:0337","https://osv.dev/RLSA-2026:0337","openssl","3.1.2","","0","1","0","1","2026A1768348800" -"OESA-2026-1265","https://osv.dev/OESA-2026-1265","glibc","2.34-210","","0","1","0","1","2026A0000001265" -"OESA-2026-1201","https://osv.dev/OESA-2026-1201","glibc","2.34-210","","0","1","0","1","2026A0000001201" -"OESA-2026-1200","https://osv.dev/OESA-2026-1200","glibc","2.34-210","","0","1","0","1","2026A0000001200" -"OESA-2026-1199","https://osv.dev/OESA-2026-1199","glibc","2.34-210","","0","1","0","1","2026A0000001199" -"OESA-2026-1198","https://osv.dev/OESA-2026-1198","glibc","2.34-210","","0","1","0","1","2026A0000001198" -"MGASA-2026-0022","https://osv.dev/MGASA-2026-0022","glibc","2.34-210","","0","1","0","1","2026A0000000022" -"RHSA-2023:2523","https://osv.dev/RHSA-2023:2523","openssl","3.1.2","","0","1","0","1","2025A1766793600" -"RHSA-2023:7877","https://osv.dev/RHSA-2023:7877","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RHSA-2024:0154","https://osv.dev/RHSA-2024:0154","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RHSA-2024:0208","https://osv.dev/RHSA-2024:0208","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RHSA-2024:0310","https://osv.dev/RHSA-2024:0310","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RHSA-2024:0500","https://osv.dev/RHSA-2024:0500","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RHSA-2024:2447","https://osv.dev/RHSA-2024:2447","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RLSA-2023:7877","https://osv.dev/RLSA-2023:7877","openssl","3.1.2","","0","1","0","1","2025A1764720000" -"RLSA-2025:21248","https://osv.dev/RLSA-2025:21248","openssl","3.1.2","","0","1","0","1","2025A1764028800" -"RHBA-2017:1929","https://osv.dev/RHBA-2017:1929","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2015:0066","https://osv.dev/RHSA-2015:0066","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2015:0716","https://osv.dev/RHSA-2015:0716","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2015:1072","https://osv.dev/RHSA-2015:1072","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2015:1115","https://osv.dev/RHSA-2015:1115","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2015:2617","https://osv.dev/RHSA-2015:2617","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2016:0008","https://osv.dev/RHSA-2016:0008","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2016:0301","https://osv.dev/RHSA-2016:0301","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2016:0305","https://osv.dev/RHSA-2016:0305","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2016:0722","https://osv.dev/RHSA-2016:0722","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2017:0286","https://osv.dev/RHSA-2017:0286","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2018:0998","https://osv.dev/RHSA-2018:0998","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2018:3221","https://osv.dev/RHSA-2018:3221","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2019:0483","https://osv.dev/RHSA-2019:0483","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2019:2304","https://osv.dev/RHSA-2019:2304","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2019:3700","https://osv.dev/RHSA-2019:3700","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:1840","https://osv.dev/RHSA-2020:1840","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:4514","https://osv.dev/RHSA-2020:4514","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5422","https://osv.dev/RHSA-2020:5422","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5476","https://osv.dev/RHSA-2020:5476","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5566","https://osv.dev/RHSA-2020:5566","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5588","https://osv.dev/RHSA-2020:5588","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5623","https://osv.dev/RHSA-2020:5623","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5637","https://osv.dev/RHSA-2020:5637","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5639","https://osv.dev/RHSA-2020:5639","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5640","https://osv.dev/RHSA-2020:5640","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5641","https://osv.dev/RHSA-2020:5641","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2020:5642","https://osv.dev/RHSA-2020:5642","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2021:1024","https://osv.dev/RHSA-2021:1024","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2021:1063","https://osv.dev/RHSA-2021:1063","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2021:1131","https://osv.dev/RHSA-2021:1131","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2022:7288","https://osv.dev/RHSA-2022:7288","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2023:1335","https://osv.dev/RHSA-2023:1335","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2023:1437","https://osv.dev/RHSA-2023:1437","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2023:1439","https://osv.dev/RHSA-2023:1439","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2023:1440","https://osv.dev/RHSA-2023:1440","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2023:1441","https://osv.dev/RHSA-2023:1441","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2024:5136","https://osv.dev/RHSA-2024:5136","openssl","3.1.2","","0","1","0","1","2025A1763769600" -"RHSA-2025:11066","https://osv.dev/RHSA-2025:11066","glibc","2.34-210","","0","1","0","1","2025A1763769600" -"RLSA-2025:21255","https://osv.dev/RLSA-2025:21255","openssl","3.1.2","","0","1","0","1","2025A1763683200" -"RLSA-2025:1330","https://osv.dev/RLSA-2025:1330","openssl","3.1.2","","0","1","0","1","2025A1759968000" -"RLSA-2025:11066","https://osv.dev/RLSA-2025:11066","glibc","2.34-210","","0","1","0","1","2025A1759881600" -"MINI-4x56-859r-prjq","https://osv.dev/MINI-4x56-859r-prjq","openssl","3.1.2","","0","1","0","1","2025A1759536000" -"MINI-547w-mfp7-933m","https://osv.dev/MINI-547w-mfp7-933m","openssl","3.1.2","","0","1","0","1","2025A1759536000" -"MINI-8ccc-42j9-wq95","https://osv.dev/MINI-8ccc-42j9-wq95","openssl","3.1.2","","0","1","0","1","2025A1759536000" -"RLSA-2025:13240","https://osv.dev/RLSA-2025:13240","glibc","2.34-210","","0","1","0","1","2025A1759449600" -"DSA-6015-1","https://osv.dev/DSA-6015-1","openssl","3.1.2","","0","1","0","1","2025A1759276800" -"MINI-fg85-78mg-4566","https://osv.dev/MINI-fg85-78mg-4566","openssl","3.1.2","","0","1","0","1","2025A1751414400" -"MINI-697q-w5vg-r6cr","https://osv.dev/MINI-697q-w5vg-r6cr","openssl","3.1.2","","0","1","0","1","2025A1748476800" -"MINI-j384-f4q6-cfjg","https://osv.dev/MINI-j384-f4q6-cfjg","openssl","3.1.2","","0","1","0","1","2025A1748476800" -"MINI-xxrx-crr8-74g3","https://osv.dev/MINI-xxrx-crr8-74g3","openssl","3.1.2","","0","1","0","1","2025A1748476800" -"DSA-5514-1","https://osv.dev/DSA-5514-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" -"DSA-5611-1","https://osv.dev/DSA-5611-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" -"DSA-5673-1","https://osv.dev/DSA-5673-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" -"DSA-5678-1","https://osv.dev/DSA-5678-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" -"openSUSE-SU-2024:11850-1","https://osv.dev/openSUSE-SU-2024:11850-1","glibc","2.34-210","","0","1","0","1","2025A1746576000" -"SUSE-SU-2025:0582-1","https://osv.dev/SUSE-SU-2025:0582-1","glibc","2.34-210","","0","1","0","1","2025A1746144000" -"OESA-2025-2046","https://osv.dev/OESA-2025-2046","glibc","2.34-210","","0","1","0","1","2025A0000002046" -"OESA-2025-2045","https://osv.dev/OESA-2025-2045","glibc","2.34-210","","0","1","0","1","2025A0000002045" -"OESA-2025-2044","https://osv.dev/OESA-2025-2044","glibc","2.34-210","","0","1","0","1","2025A0000002044" -"OESA-2025-1581","https://osv.dev/OESA-2025-1581","glibc","2.34-210","","0","1","0","1","2025A0000001581" -"OESA-2025-1242","https://osv.dev/OESA-2025-1242","glibc","2.34-210","","0","1","0","1","2025A0000001242" -"MGASA-2025-0220","https://osv.dev/MGASA-2025-0220","glibc","2.34-210","","0","1","0","1","2025A0000000220" -"MGASA-2025-0164","https://osv.dev/MGASA-2025-0164","glibc","2.34-210","","0","1","0","1","2025A0000000164" -"MGASA-2025-0026","https://osv.dev/MGASA-2025-0026","glibc","2.34-210","","0","1","0","1","2025A0000000026" -"MGASA-2024-0173","https://osv.dev/MGASA-2024-0173","glibc","2.34-210","","0","1","0","1","2024A0000000173" -"MGASA-2024-0147","https://osv.dev/MGASA-2024-0147","glibc","2.34-210","","0","1","0","1","2024A0000000147" -"MGASA-2024-0026","https://osv.dev/MGASA-2024-0026","glibc","2.34-210","","0","1","0","1","2024A0000000026" -"MGASA-2023-0286","https://osv.dev/MGASA-2023-0286","glibc","2.34-210","","0","1","0","1","2023A0000000286" -"MGASA-2023-0281","https://osv.dev/MGASA-2023-0281","glibc","2.34-210","","0","1","0","1","2023A0000000281" -"MGASA-2023-0270","https://osv.dev/MGASA-2023-0270","glibc","2.34-210","","0","1","0","1","2023A0000000270" -"MAL-2022-4301","https://osv.dev/MAL-2022-4301","libidn2","2.3.2","","0","1","0","1","2022A0000004301" -"DEBIAN-CVE-2026-22796","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-22796","openssl","3.1.2","","0","1","0","1","2026A0000022796" -"DEBIAN-CVE-2026-22795","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-22795","openssl","3.1.2","","0","1","0","1","2026A0000022795" -"DEBIAN-CVE-2026-0915","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-0915","glibc","2.34-210","","0","1","0","1","2026A0000000915" -"DEBIAN-CVE-2026-0861","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-0861","glibc","2.34-210","","0","1","0","1","2026A0000000861" -"DEBIAN-CVE-2025-69421","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69421","openssl","3.1.2","","0","1","0","1","2025A0000069421" -"DEBIAN-CVE-2025-69420","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69420","openssl","3.1.2","","0","1","0","1","2025A0000069420" -"DEBIAN-CVE-2025-69419","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69419","openssl","3.1.2","","0","1","0","1","2025A0000069419" -"DEBIAN-CVE-2025-69418","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69418","openssl","3.1.2","","0","1","0","1","2025A0000069418" -"DEBIAN-CVE-2025-68160","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-68160","openssl","3.1.2","","0","1","0","1","2025A0000068160" -"DEBIAN-CVE-2025-66199","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-66199","openssl","3.1.2","","0","1","0","1","2025A0000066199" -"DEBIAN-CVE-2025-27587","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-27587","openssl","3.1.2","","0","1","0","1","2025A0000027587" -"DEBIAN-CVE-2025-15469","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15469","openssl","3.1.2","","0","1","0","1","2025A0000015469" -"DEBIAN-CVE-2025-15468","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15468","openssl","3.1.2","","0","1","0","1","2025A0000015468" -"DEBIAN-CVE-2025-15467","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15467","openssl","3.1.2","","0","1","0","1","2025A0000015467" -"DEBIAN-CVE-2025-15281","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15281","glibc","2.34-210","","0","1","0","1","2025A0000015281" -"DEBIAN-CVE-2025-11187","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-11187","openssl","3.1.2","","0","1","0","1","2025A0000011187" -"DEBIAN-CVE-2025-9232","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-9232","openssl","3.1.2","","0","1","0","1","2025A0000009232" -"DEBIAN-CVE-2025-9231","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-9231","openssl","3.1.2","","0","1","0","1","2025A0000009231" -"DEBIAN-CVE-2025-9230","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-9230","openssl","3.1.2","","0","1","0","1","2025A0000009230" -"DEBIAN-CVE-2025-8058","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-8058","glibc","2.34-210","","0","1","0","1","2025A0000008058" -"DEBIAN-CVE-2025-5745","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-5745","glibc","2.34-210","","0","1","0","1","2025A0000005745" -"DEBIAN-CVE-2025-5702","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-5702","glibc","2.34-210","","0","1","0","1","2025A0000005702" -"DEBIAN-CVE-2025-4802","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-4802","glibc","2.34-210","","0","1","0","1","2025A0000004802" -"DEBIAN-CVE-2025-4575","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-4575","openssl","3.1.2","","0","1","0","1","2025A0000004575" -"DEBIAN-CVE-2025-0395","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-0395","glibc","2.34-210","","0","1","0","1","2025A0000000395" -"UBUNTU-CVE-2024-41996","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2024-41996","openssl","3.1.2","","0","1","0","1","2024A0000041996" -"DEBIAN-CVE-2024-33602","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33602","glibc","2.34-210","","0","1","0","1","2024A0000033602" -"DEBIAN-CVE-2024-33601","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33601","glibc","2.34-210","","0","1","0","1","2024A0000033601" -"DEBIAN-CVE-2024-33600","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33600","glibc","2.34-210","","0","1","0","1","2024A0000033600" -"DEBIAN-CVE-2024-33599","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33599","glibc","2.34-210","","0","1","0","1","2024A0000033599" -"DEBIAN-CVE-2024-13176","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-13176","openssl","3.1.2","","0","1","0","1","2024A0000013176" -"DEBIAN-CVE-2024-12797","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-12797","openssl","3.1.2","","0","1","0","1","2024A0000012797" -"DEBIAN-CVE-2024-9143","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-9143","openssl","3.1.2","","0","1","0","1","2024A0000009143" -"DEBIAN-CVE-2024-6119","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-6119","openssl","3.1.2","","0","1","0","1","2024A0000006119" -"DEBIAN-CVE-2024-5535","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-5535","openssl","3.1.2","","0","1","0","1","2024A0000005535" -"DEBIAN-CVE-2024-4741","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-4741","openssl","3.1.2","","0","1","0","1","2024A0000004741" -"DEBIAN-CVE-2024-4603","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-4603","openssl","3.1.2","","0","1","0","1","2024A0000004603" -"DEBIAN-CVE-2024-2961","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-2961","glibc","2.34-210","","0","1","0","1","2024A0000002961" -"DEBIAN-CVE-2024-2511","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-2511","openssl","3.1.2","","0","1","0","1","2024A0000002511" -"DEBIAN-CVE-2024-0727","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-0727","openssl","3.1.2","","0","1","0","1","2024A0000000727" -"BELL-CVE-2023-50782","https://nvd.nist.gov/vuln/detail/BELL-CVE-2023-50782","openssl","3.1.2","","0","1","0","1","2023A0000050782" -"DEBIAN-CVE-2023-6780","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6780","glibc","2.34-210","","0","1","0","1","2023A0000006780" -"DEBIAN-CVE-2023-6779","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6779","glibc","2.34-210","","0","1","0","1","2023A0000006779" -"DEBIAN-CVE-2023-6246","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6246","glibc","2.34-210","","0","1","0","1","2023A0000006246" -"DEBIAN-CVE-2023-6237","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6237","openssl","3.1.2","","0","1","0","1","2023A0000006237" -"DEBIAN-CVE-2023-6129","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6129","openssl","3.1.2","","0","1","0","1","2023A0000006129" +"CVE-2024-13176","https://nvd.nist.gov/vuln/detail/CVE-2024-13176","openssl","3.1.2","4.1","1","0","0","1","2024A0000013176" +"CVE-2024-9143","https://nvd.nist.gov/vuln/detail/CVE-2024-9143","openssl","3.1.2","4.3","1","0","0","1","2024A0000009143" +"CVE-2024-6119","https://nvd.nist.gov/vuln/detail/CVE-2024-6119","openssl","3.1.2","7.5","1","0","1","2","2024A0000006119" +"CVE-2024-5535","https://nvd.nist.gov/vuln/detail/CVE-2024-5535","openssl","3.1.2","9.1","1","0","0","1","2024A0000005535" +"CVE-2024-4741","https://nvd.nist.gov/vuln/detail/CVE-2024-4741","openssl","3.1.2","7.5","1","0","0","1","2024A0000004741" +"CVE-2024-4603","https://nvd.nist.gov/vuln/detail/CVE-2024-4603","openssl","3.1.2","5.3","1","0","0","1","2024A0000004603" +"CVE-2024-2511","https://nvd.nist.gov/vuln/detail/CVE-2024-2511","openssl","3.1.2","5.9","1","0","0","1","2024A0000002511" +"CVE-2024-0727","https://nvd.nist.gov/vuln/detail/CVE-2024-0727","openssl","3.1.2","5.5","1","0","1","2","2024A0000000727" +"CVE-2023-6237","https://nvd.nist.gov/vuln/detail/CVE-2023-6237","openssl","3.1.2","5.9","1","0","0","1","2023A0000006237" +"CVE-2023-6129","https://nvd.nist.gov/vuln/detail/CVE-2023-6129","openssl","3.1.2","6.5","1","0","1","2","2023A0000006129" "CVE-2023-5678","https://nvd.nist.gov/vuln/detail/CVE-2023-5678","openssl","3.1.2","5.3","1","0","1","2","2023A0000005678" "CVE-2023-5363","https://nvd.nist.gov/vuln/detail/CVE-2023-5363","openssl","3.1.2","7.5","1","0","1","2","2023A0000005363" -"DEBIAN-CVE-2023-5156","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-5156","glibc","2.34-210","","0","1","0","1","2023A0000005156" -"DEBIAN-CVE-2023-4911","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4911","glibc","2.34-210","","0","1","0","1","2023A0000004911" -"DEBIAN-CVE-2023-4813","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4813","glibc","2.34-210","","0","1","0","1","2023A0000004813" "CVE-2023-4807","https://nvd.nist.gov/vuln/detail/CVE-2023-4807","openssl","3.1.2","7.8","1","0","1","2","2023A0000004807" -"DEBIAN-CVE-2023-4806","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4806","glibc","2.34-210","","0","1","0","1","2023A0000004806" -"DEBIAN-CVE-2023-4527","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4527","glibc","2.34-210","","0","1","0","1","2023A0000004527" -"UBUNTU-CVE-2023-3817","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-3817","openssl","3.1.2","","0","1","0","1","2023A0000003817" -"UBUNTU-CVE-2023-3446","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-3446","openssl","3.1.2","","0","1","0","1","2023A0000003446" -"UBUNTU-CVE-2023-2650","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-2650","openssl","3.1.2","","0","1","0","1","2023A0000002650" -"CVE-2023-0687","https://nvd.nist.gov/vuln/detail/CVE-2023-0687","glibc","2.34-210","4.6","0","0","1","1","2023A0000000687" -"UBUNTU-CVE-2023-0466","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0466","openssl","3.1.2","","0","1","0","1","2023A0000000466" -"UBUNTU-CVE-2023-0465","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0465","openssl","3.1.2","","0","1","0","1","2023A0000000465" -"UBUNTU-CVE-2023-0464","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0464","openssl","3.1.2","","0","1","0","1","2023A0000000464" -"UBUNTU-CVE-2023-0286","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0286","openssl","3.1.2","","0","1","0","1","2023A0000000286" -"UBUNTU-CVE-2023-0215","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0215","openssl","3.1.2","","0","1","0","1","2023A0000000215" -"UBUNTU-CVE-2022-40735","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-40735","openssl","3.1.2","","0","1","0","1","2022A0000040735" -"UBUNTU-CVE-2022-4450","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-4450","openssl","3.1.2","","0","1","0","1","2022A0000004450" -"UBUNTU-CVE-2022-4304","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-4304","openssl","3.1.2","","0","1","0","1","2022A0000004304" -"UBUNTU-CVE-2022-2097","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-2097","openssl","3.1.2","","0","1","0","1","2022A0000002097" -"UBUNTU-CVE-2022-2068","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-2068","openssl","3.1.2","","0","1","0","1","2022A0000002068" -"UBUNTU-CVE-2022-1473","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-1473","openssl","3.1.2","","0","1","0","1","2022A0000001473" -"UBUNTU-CVE-2022-1292","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-1292","openssl","3.1.2","","0","1","0","1","2022A0000001292" -"UBUNTU-CVE-2022-0778","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-0778","openssl","3.1.2","","0","1","0","1","2022A0000000778" -"UBUNTU-CVE-2021-33574","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-33574","glibc","2.34-210","","0","1","0","1","2021A0000033574" -"UBUNTU-CVE-2021-23840","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-23840","openssl","3.1.2","","0","1","0","1","2021A0000023840" -"CVE-2021-3998","https://nvd.nist.gov/vuln/detail/CVE-2021-3998","glibc","2.34-210","7.5","0","0","1","1","2021A0000003998" -"UBUNTU-CVE-2021-3712","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-3712","openssl","3.1.2","","0","1","0","1","2021A0000003712" -"UBUNTU-CVE-2021-3711","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-3711","openssl","3.1.2","","0","1","0","1","2021A0000003711" -"UBUNTU-CVE-2021-3449","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-3449","openssl","3.1.2","","0","1","0","1","2021A0000003449" -"UBUNTU-CVE-2020-1968","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2020-1968","openssl","3.1.2","","0","1","0","1","2020A0000001968" -"DEBIAN-CVE-2019-1010025","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010025","glibc","2.34-210","","0","1","0","1","2019A0001010025" -"DEBIAN-CVE-2019-1010024","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010024","glibc","2.34-210","","0","1","0","1","2019A0001010024" -"DEBIAN-CVE-2019-1010023","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010023","glibc","2.34-210","","0","1","0","1","2019A0001010023" -"DEBIAN-CVE-2019-1010022","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010022","glibc","2.34-210","","0","1","0","1","2019A0001010022" -"DEBIAN-CVE-2019-9192","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-9192","glibc","2.34-210","","0","1","0","1","2019A0000009192" -"UBUNTU-CVE-2019-7309","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2019-7309","glibc","2.34-210","","0","1","0","1","2019A0000007309" -"UBUNTU-CVE-2019-6488","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2019-6488","glibc","2.34-210","","0","1","0","1","2019A0000006488" -"UBUNTU-CVE-2019-1563","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2019-1563","openssl","3.1.2","","0","1","0","1","2019A0000001563" -"DEBIAN-CVE-2018-20796","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2018-20796","glibc","2.34-210","","0","1","0","1","2018A0000020796" -"UBUNTU-CVE-2016-20013","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2016-20013","glibc","2.34-210","","0","1","0","1","2016A0000020013" -"UBUNTU-CVE-2016-10739","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2016-10739","glibc","2.34-210","","0","1","0","1","2016A0000010739" -"UBUNTU-CVE-2015-8985","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2015-8985","glibc","2.34-210","","0","1","0","1","2015A0000008985" -"UBUNTU-CVE-2015-5180","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2015-5180","glibc","2.34-210","","0","1","0","1","2015A0000005180" -"DEBIAN-CVE-2010-4756","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2010-4756","glibc","2.34-210","","0","1","0","1","2010A0000004756" -"UBUNTU-CVE-2010-3192","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2010-3192","glibc","2.34-210","","0","1","0","1","2010A0000003192" -"UBUNTU-CVE-2009-5155","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2009-5155","glibc","2.34-210","","0","1","0","1","2009A0000005155" diff --git a/ui/package-lock.json b/ui/package-lock.json index 8beb4d577..2716ea1e4 100644 --- a/ui/package-lock.json +++ b/ui/package-lock.json @@ -1,12 +1,12 @@ { "name": "ui", - "version": "5.15.0", + "version": "5.16.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "ui", - "version": "5.15.0", + "version": "5.16.0", "dependencies": { "@ant-design/icons": "^6.0.0", "@tailwindcss/vite": "^4.1.4", diff --git a/ui/package.json b/ui/package.json index 08cc49b6b..06eab5d74 100644 --- a/ui/package.json +++ b/ui/package.json @@ -1,7 +1,7 @@ { "name": "ui", "private": true, - "version": "5.15.0", + "version": "5.16.0", "type": "module", "scripts": { "dev": "vite", From f0560dd89007e4496007342ecc4f198e86193514 Mon Sep 17 00:00:00 2001 From: Manuthor Date: Sun, 15 Feb 2026 15:10:56 +0100 Subject: [PATCH 2/2] chore: update sbom reports --- .github/scripts/release.sh | 1 - sbom/openssl/bom.cdx.json | 89 ++++- sbom/openssl/bom.spdx.json | 91 ++++- sbom/openssl/meta.json | 10 +- sbom/openssl/vulns.csv | 367 ++++++++++++++++++++- sbom/server/fips/dynamic/bom.cdx.json | 28 +- sbom/server/fips/dynamic/bom.spdx.json | 24 +- sbom/server/fips/dynamic/graph.png | Bin 15334 -> 15672 bytes sbom/server/fips/dynamic/meta.json | 4 +- sbom/server/fips/dynamic/vulns.csv | 30 +- sbom/server/fips/static/bom.cdx.json | 18 +- sbom/server/fips/static/bom.spdx.json | 16 +- sbom/server/fips/static/graph.png | Bin 9778 -> 10125 bytes sbom/server/fips/static/meta.json | 4 +- sbom/server/fips/static/vulns.csv | 16 +- sbom/server/non-fips/dynamic/bom.cdx.json | 18 +- sbom/server/non-fips/dynamic/bom.spdx.json | 16 +- sbom/server/non-fips/dynamic/graph.png | Bin 10454 -> 10801 bytes sbom/server/non-fips/dynamic/meta.json | 4 +- sbom/server/non-fips/dynamic/vulns.csv | 16 +- sbom/server/non-fips/static/bom.cdx.json | 18 +- sbom/server/non-fips/static/bom.spdx.json | 16 +- sbom/server/non-fips/static/graph.png | Bin 9778 -> 10125 bytes sbom/server/non-fips/static/meta.json | 4 +- sbom/server/non-fips/static/vulns.csv | 16 +- 25 files changed, 652 insertions(+), 154 deletions(-) diff --git a/.github/scripts/release.sh b/.github/scripts/release.sh index dbed8b3a8..2349b5068 100755 --- a/.github/scripts/release.sh +++ b/.github/scripts/release.sh @@ -62,5 +62,4 @@ git cliff -w "$PWD" -u -p CHANGELOG.md -t "$NEW_VERSION" ${SED_BINARY} "${SED_IN_PLACE[@]}" 's/(#\([0-9]\+\))/([#\1](https:\/\/github.com\/Cosmian\/kms\/pull\/\1))/g' CHANGELOG.md bash .github/scripts/build_ui.sh -bash .github/scripts/nix.sh update-hashes bash .github/scripts/nix.sh sbom diff --git a/sbom/openssl/bom.cdx.json b/sbom/openssl/bom.cdx.json index e6583e4cc..648d8512b 100644 --- a/sbom/openssl/bom.cdx.json +++ b/sbom/openssl/bom.cdx.json @@ -2,9 +2,9 @@ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, - "serialNumber": "urn:uuid:3d33ee63-0ee0-4ba0-b718-473baaadbeca", + "serialNumber": "urn:uuid:cda70178-7926-47f0-b9f4-0cf47d59261a", "metadata": { - "timestamp": "2026-02-15T08:53:29.929723+01:00", + "timestamp": "2026-02-15T14:15:23.106209+01:00", "properties": [ { "name": "sbom_type", @@ -15,12 +15,12 @@ { "vendor": "TII", "name": "sbomnix", - "version": "1.7.4" + "version": "1.7.3" } ], "component": { "type": "library", - "bom-ref": "/nix/store/88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv", + "bom-ref": "/nix/store/fha0ddf9ccafwypn871r17w0216wmkr1-openssl-3.1.2.drv", "name": "openssl", "version": "3.1.2", "purl": "pkg:nix/openssl@3.1.2", @@ -28,19 +28,92 @@ "properties": [ { "name": "nix:output_path", - "value": "/nix/store/wxvknmscghfnn6xfnxayn0gsrs01cd0c-openssl-3.1.2" + "value": "/nix/store/6w5ixffqmjdbgz79v9f6ahqhc790x0ks-openssl-3.1.2" }, { "name": "nix:drv_path", - "value": "/nix/store/88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv" + "value": "/nix/store/fha0ddf9ccafwypn871r17w0216wmkr1-openssl-3.1.2.drv" } ] } }, - "components": [], + "components": [ + { + "type": "library", + "bom-ref": "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", + "name": "glibc", + "version": "2.34-210", + "purl": "pkg:nix/glibc@2.34-210", + "cpe": "cpe:2.3:a:glibc:glibc:2.34-210:*:*:*:*:*:*:*", + "properties": [ + { + "name": "nix:output_path", + "value": "/nix/store/b2hc0i92l22ir2kavnjn3z5z6mzabbvm-glibc-2.34-210" + }, + { + "name": "nix:drv_path", + "value": "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" + } + ] + }, + { + "type": "library", + "bom-ref": "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", + "name": "libidn2", + "version": "2.3.2", + "purl": "pkg:nix/libidn2@2.3.2", + "cpe": "cpe:2.3:a:gnu:libidn2:2.3.2:*:*:*:*:*:*:*", + "properties": [ + { + "name": "nix:output_path", + "value": "/nix/store/9jqiw71lq60sdpiniywq3msknf3wmd9c-libidn2-2.3.2" + }, + { + "name": "nix:drv_path", + "value": "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv" + } + ] + }, + { + "type": "library", + "bom-ref": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv", + "name": "libunistring", + "version": "1.0", + "purl": "pkg:nix/libunistring@1.0", + "cpe": "cpe:2.3:a:libunistring:libunistring:1.0:*:*:*:*:*:*:*", + "properties": [ + { + "name": "nix:output_path", + "value": "/nix/store/gfqwbax0x58mjnh89ca6milx41bw49lr-libunistring-1.0" + }, + { + "name": "nix:drv_path", + "value": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" + } + ] + } + ], "dependencies": [ { - "ref": "/nix/store/88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv" + "ref": "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", + "dependsOn": [ + "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv" + ] + }, + { + "ref": "/nix/store/k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", + "dependsOn": [ + "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" + ] + }, + { + "ref": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" + }, + { + "ref": "/nix/store/fha0ddf9ccafwypn871r17w0216wmkr1-openssl-3.1.2.drv", + "dependsOn": [ + "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" + ] } ] } diff --git a/sbom/openssl/bom.spdx.json b/sbom/openssl/bom.spdx.json index aefdae4a0..c05cc5a59 100644 --- a/sbom/openssl/bom.spdx.json +++ b/sbom/openssl/bom.spdx.json @@ -2,19 +2,82 @@ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", - "name": "SPDXRef-nix-store-88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv", - "documentNamespace": "sbomnix://39fa90cb-0b1e-4dc5-84ea-f90613ac3006", + "name": "SPDXRef-nix-store-fha0ddf9ccafwypn871r17w0216wmkr1-openssl-3.1.2.drv", + "documentNamespace": "sbomnix://24994676-efc3-42a6-96d5-b4eda44a28da", "creationInfo": { - "created": "2026-02-15T08:53:31.130779+01:00", + "created": "2026-02-15T14:15:24.025486+01:00", "creators": [ - "Tool: sbomnix-1.7.4" + "Tool: sbomnix-1.7.3" ] }, "comment": "included dependencies: 'runtime_only'", "packages": [ + { + "name": "glibc", + "SPDXID": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", + "versionInfo": "2.34-210", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "NOASSERTION", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:glibc:glibc:2.34-210:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:nix/glibc@2.34-210" + } + ] + }, + { + "name": "libidn2", + "SPDXID": "SPDXRef-nix-store-k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", + "versionInfo": "2.3.2", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "NOASSERTION", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:gnu:libidn2:2.3.2:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:nix/libidn2@2.3.2" + } + ] + }, + { + "name": "libunistring", + "SPDXID": "SPDXRef-nix-store-f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv", + "versionInfo": "1.0", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "licenseDeclared": "NOASSERTION", + "copyrightText": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "SECURITY", + "referenceType": "cpe23Type", + "referenceLocator": "cpe:2.3:a:libunistring:libunistring:1.0:*:*:*:*:*:*:*" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:nix/libunistring@1.0" + } + ] + }, { "name": "openssl", - "SPDXID": "SPDXRef-nix-store-88fkh86d7gkbli16b4byxfygzr8857y3-openssl-3.1.2.drv", + "SPDXID": "SPDXRef-nix-store-fha0ddf9ccafwypn871r17w0216wmkr1-openssl-3.1.2.drv", "versionInfo": "3.1.2", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", @@ -34,5 +97,21 @@ ] } ], - "relationships": [] + "relationships": [ + { + "spdxElementId": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", + "relationshipType": "DEPENDS_ON", + "relatedSpdxElement": "SPDXRef-nix-store-k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv" + }, + { + "spdxElementId": "SPDXRef-nix-store-k579w215al09ygy03k53sx28af8cq749-libidn2-2.3.2.drv", + "relationshipType": "DEPENDS_ON", + "relatedSpdxElement": "SPDXRef-nix-store-f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" + }, + { + "spdxElementId": "SPDXRef-nix-store-fha0ddf9ccafwypn871r17w0216wmkr1-openssl-3.1.2.drv", + "relationshipType": "DEPENDS_ON", + "relatedSpdxElement": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" + } + ] } diff --git a/sbom/openssl/meta.json b/sbom/openssl/meta.json index 86770157c..5f6865a9e 100644 --- a/sbom/openssl/meta.json +++ b/sbom/openssl/meta.json @@ -3,15 +3,15 @@ "build": { "variant": "fips", "derivation": "openssl312", - "output_path": "/nix/store/wxvknmscghfnn6xfnxayn0gsrs01cd0c-openssl-3.1.2", - "timestamp": "2026-02-15T07:54:17Z", + "output_path": "/nix/store/6w5ixffqmjdbgz79v9f6ahqhc790x0ks-openssl-3.1.2", + "timestamp": "2026-02-15T13:16:25Z", "generator": { "tool": "sbomnix", - "version": "1.7.4" + "version": "1.7.3" } }, - "component_count": 1, - "vulnerability_count": 13, + "component_count": 4, + "vulnerability_count": 360, "notes": [ "SBOM targets the OpenSSL derivation itself", "All dependencies are from Nix store with pinned versions", diff --git a/sbom/openssl/vulns.csv b/sbom/openssl/vulns.csv index 9bf97c50e..2d091c752 100644 --- a/sbom/openssl/vulns.csv +++ b/sbom/openssl/vulns.csv @@ -1,14 +1,361 @@ "vuln_id","url","package","version_local","severity","grype","osv","vulnix","sum","sortcol" -"CVE-2024-13176","https://nvd.nist.gov/vuln/detail/CVE-2024-13176","openssl","3.1.2","4.1","1","0","0","1","2024A0000013176" -"CVE-2024-9143","https://nvd.nist.gov/vuln/detail/CVE-2024-9143","openssl","3.1.2","4.3","1","0","0","1","2024A0000009143" -"CVE-2024-6119","https://nvd.nist.gov/vuln/detail/CVE-2024-6119","openssl","3.1.2","7.5","1","0","1","2","2024A0000006119" -"CVE-2024-5535","https://nvd.nist.gov/vuln/detail/CVE-2024-5535","openssl","3.1.2","9.1","1","0","0","1","2024A0000005535" -"CVE-2024-4741","https://nvd.nist.gov/vuln/detail/CVE-2024-4741","openssl","3.1.2","7.5","1","0","0","1","2024A0000004741" -"CVE-2024-4603","https://nvd.nist.gov/vuln/detail/CVE-2024-4603","openssl","3.1.2","5.3","1","0","0","1","2024A0000004603" -"CVE-2024-2511","https://nvd.nist.gov/vuln/detail/CVE-2024-2511","openssl","3.1.2","5.9","1","0","0","1","2024A0000002511" -"CVE-2024-0727","https://nvd.nist.gov/vuln/detail/CVE-2024-0727","openssl","3.1.2","5.5","1","0","1","2","2024A0000000727" -"CVE-2023-6237","https://nvd.nist.gov/vuln/detail/CVE-2023-6237","openssl","3.1.2","5.9","1","0","0","1","2023A0000006237" -"CVE-2023-6129","https://nvd.nist.gov/vuln/detail/CVE-2023-6129","openssl","3.1.2","6.5","1","0","1","2","2023A0000006129" +"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770854400" +"RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.1.2","","0","1","0","1","2026A1770768000" +"USN-7980-1","https://osv.dev/USN-7980-1","openssl","3.1.2","","0","1","0","1","2026A1770681600" +"USN-6409-1","https://osv.dev/USN-6409-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-6541-1","https://osv.dev/USN-6541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-6541-2","https://osv.dev/USN-6541-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-6737-1","https://osv.dev/USN-6737-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-6737-2","https://osv.dev/USN-6737-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-6804-1","https://osv.dev/USN-6804-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-7259-1","https://osv.dev/USN-7259-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-7541-1","https://osv.dev/USN-7541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-7634-1","https://osv.dev/USN-7634-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-7760-1","https://osv.dev/USN-7760-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"USN-8005-1","https://osv.dev/USN-8005-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" +"CGA-4r5h-8hvp-w6xm","https://osv.dev/CGA-4r5h-8hvp-w6xm","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"CGA-9vjv-2q8r-rw73","https://osv.dev/CGA-9vjv-2q8r-rw73","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2021:1024","https://osv.dev/RLSA-2021:1024","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2021:5226","https://osv.dev/RLSA-2021:5226","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2022:1065","https://osv.dev/RLSA-2022:1065","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2022:7288","https://osv.dev/RLSA-2022:7288","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2023:0946","https://osv.dev/RLSA-2023:0946","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2023:1405","https://osv.dev/RLSA-2023:1405","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"RLSA-2024:6783","https://osv.dev/RLSA-2024:6783","openssl","3.1.2","","0","1","0","1","2026A1770249600" +"ALSA-2022:1065","https://osv.dev/ALSA-2022:1065","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2022:5818","https://osv.dev/ALSA-2022:5818","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2022:6224","https://osv.dev/ALSA-2022:6224","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2022:7288","https://osv.dev/ALSA-2022:7288","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2023:0946","https://osv.dev/ALSA-2023:0946","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2023:1405","https://osv.dev/ALSA-2023:1405","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2023:2523","https://osv.dev/ALSA-2023:2523","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2023:3722","https://osv.dev/ALSA-2023:3722","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2023:7877","https://osv.dev/ALSA-2023:7877","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2024:0310","https://osv.dev/ALSA-2024:0310","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2024:2447","https://osv.dev/ALSA-2024:2447","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2024:6783","https://osv.dev/ALSA-2024:6783","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2024:7848","https://osv.dev/ALSA-2024:7848","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2024:9333","https://osv.dev/ALSA-2024:9333","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2025:1330","https://osv.dev/ALSA-2025:1330","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2025:21248","https://osv.dev/ALSA-2025:21248","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2025:21255","https://osv.dev/ALSA-2025:21255","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2026:0337","https://osv.dev/ALSA-2026:0337","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2026:1472","https://osv.dev/ALSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2026:1473","https://osv.dev/ALSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-23jc-cp93-m38q","https://osv.dev/CGA-23jc-cp93-m38q","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-3349-gw4v-v75q","https://osv.dev/CGA-3349-gw4v-v75q","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-3564-hcr3-rwcx","https://osv.dev/CGA-3564-hcr3-rwcx","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-3j72-vx7g-q9jf","https://osv.dev/CGA-3j72-vx7g-q9jf","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-5h8h-83x5-5c7f","https://osv.dev/CGA-5h8h-83x5-5c7f","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-62vj-r9x6-x394","https://osv.dev/CGA-62vj-r9x6-x394","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-6j5g-x524-ppqj","https://osv.dev/CGA-6j5g-x524-ppqj","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-7gc4-88j6-9pgg","https://osv.dev/CGA-7gc4-88j6-9pgg","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-92vg-cvc9-fcwm","https://osv.dev/CGA-92vg-cvc9-fcwm","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-97mc-5jrp-289h","https://osv.dev/CGA-97mc-5jrp-289h","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-98cj-65vp-55vg","https://osv.dev/CGA-98cj-65vp-55vg","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-9hqf-jc89-w38w","https://osv.dev/CGA-9hqf-jc89-w38w","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-c79m-3cvx-p3fj","https://osv.dev/CGA-c79m-3cvx-p3fj","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-f7hh-h68c-h67j","https://osv.dev/CGA-f7hh-h68c-h67j","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-g724-hp8h-w4q3","https://osv.dev/CGA-g724-hp8h-w4q3","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-gg8h-2f2r-7qx4","https://osv.dev/CGA-gg8h-2f2r-7qx4","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-grh5-h34q-5f38","https://osv.dev/CGA-grh5-h34q-5f38","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-h2rf-gww3-5hm6","https://osv.dev/CGA-h2rf-gww3-5hm6","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-jw8r-q3r6-737x","https://osv.dev/CGA-jw8r-q3r6-737x","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-mfvr-g9cv-vw4q","https://osv.dev/CGA-mfvr-g9cv-vw4q","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-mr6w-v7h5-px4g","https://osv.dev/CGA-mr6w-v7h5-px4g","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-pf9v-45gc-f4gq","https://osv.dev/CGA-pf9v-45gc-f4gq","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-pg2x-phcw-gc86","https://osv.dev/CGA-pg2x-phcw-gc86","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-r7x6-2r6m-2rpf","https://osv.dev/CGA-r7x6-2r6m-2rpf","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"CGA-wggh-4hqr-p82f","https://osv.dev/CGA-wggh-4hqr-p82f","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHBA-2025:6314","https://osv.dev/RHBA-2025:6314","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2024:6783","https://osv.dev/RHSA-2024:6783","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2024:7846","https://osv.dev/RHSA-2024:7846","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2024:7847","https://osv.dev/RHSA-2024:7847","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2024:7848","https://osv.dev/RHSA-2024:7848","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2024:9333","https://osv.dev/RHSA-2024:9333","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:1330","https://osv.dev/RHSA-2025:1330","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:21174","https://osv.dev/RHSA-2025:21174","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:21248","https://osv.dev/RHSA-2025:21248","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:21255","https://osv.dev/RHSA-2025:21255","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:21562","https://osv.dev/RHSA-2025:21562","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:22794","https://osv.dev/RHSA-2025:22794","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2025:3666","https://osv.dev/RHSA-2025:3666","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:0337","https://osv.dev/RHSA-2026:0337","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:0602","https://osv.dev/RHSA-2026:0602","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:0714","https://osv.dev/RHSA-2026:0714","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:0887","https://osv.dev/RHSA-2026:0887","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:1349","https://osv.dev/RHSA-2026:1349","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:1475","https://osv.dev/RHSA-2026:1475","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RHSA-2026:1720","https://osv.dev/RHSA-2026:1720","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RLSA-2021:4424","https://osv.dev/RLSA-2021:4424","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RLSA-2022:5818","https://osv.dev/RLSA-2022:5818","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RLSA-2024:7848","https://osv.dev/RLSA-2024:7848","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"RLSA-2024:9333","https://osv.dev/RLSA-2024:9333","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"USN-7264-1","https://osv.dev/USN-7264-1","openssl","3.1.2","","0","1","0","1","2026A1770163200" +"ALSA-2026:1334","https://osv.dev/ALSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"SUSE-SU-2025:01702-2","https://osv.dev/SUSE-SU-2025:01702-2","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"SUSE-SU-2026:0371-1","https://osv.dev/SUSE-SU-2026:0371-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"USN-6620-1","https://osv.dev/USN-6620-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:12316-1","https://osv.dev/openSUSE-SU-2024:12316-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13123-1","https://osv.dev/openSUSE-SU-2024:13123-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13273-1","https://osv.dev/openSUSE-SU-2024:13273-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13294-1","https://osv.dev/openSUSE-SU-2024:13294-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13388-1","https://osv.dev/openSUSE-SU-2024:13388-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13647-1","https://osv.dev/openSUSE-SU-2024:13647-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13877-1","https://osv.dev/openSUSE-SU-2024:13877-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13935-1","https://osv.dev/openSUSE-SU-2024:13935-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2024:13991-1","https://osv.dev/openSUSE-SU-2024:13991-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"openSUSE-SU-2025:14851-1","https://osv.dev/openSUSE-SU-2025:14851-1","glibc","2.34-210","","0","1","0","1","2026A1770163200" +"MINI-646c-qwjc-fhrr","https://osv.dev/MINI-646c-qwjc-fhrr","openssl","3.1.2","","0","1","0","1","2026A1770076800" +"MINI-vq8c-vrvw-h2g8","https://osv.dev/MINI-vq8c-vrvw-h2g8","openssl","3.1.2","","0","1","0","1","2026A1770076800" +"RLSA-2026:1472","https://osv.dev/RLSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1769731200" +"RLSA-2026:1473","https://osv.dev/RLSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1769731200" +"RLSA-2026:1334","https://osv.dev/RLSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1769731200" +"ECHO-0529-49f7-34d9","https://osv.dev/ECHO-0529-49f7-34d9","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-0e8b-e5b4-4661","https://osv.dev/ECHO-0e8b-e5b4-4661","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-1956-f8c5-351f","https://osv.dev/ECHO-1956-f8c5-351f","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-29d0-be66-1d36","https://osv.dev/ECHO-29d0-be66-1d36","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-2c1d-6266-fce5","https://osv.dev/ECHO-2c1d-6266-fce5","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-3df5-a3a2-6763","https://osv.dev/ECHO-3df5-a3a2-6763","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-7300-0df7-ef21","https://osv.dev/ECHO-7300-0df7-ef21","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-b2f7-5a6b-fae1","https://osv.dev/ECHO-b2f7-5a6b-fae1","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-decb-8594-a95c","https://osv.dev/ECHO-decb-8594-a95c","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-f3f1-7685-1435","https://osv.dev/ECHO-f3f1-7685-1435","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-5fwx-pgcg-m63x","https://osv.dev/MINI-5fwx-pgcg-m63x","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-65xw-w3w7-rq9j","https://osv.dev/MINI-65xw-w3w7-rq9j","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-7xm6-82wh-gj9f","https://osv.dev/MINI-7xm6-82wh-gj9f","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-f9qm-gx9g-pp9f","https://osv.dev/MINI-f9qm-gx9g-pp9f","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-h554-5xj6-wrxh","https://osv.dev/MINI-h554-5xj6-wrxh","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-mgc9-4rpq-57xp","https://osv.dev/MINI-mgc9-4rpq-57xp","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-mp2m-wjv9-45g9","https://osv.dev/MINI-mp2m-wjv9-45g9","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-mxh7-mw93-fg88","https://osv.dev/MINI-mxh7-mw93-fg88","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-qg2w-mv6w-hjxw","https://osv.dev/MINI-qg2w-mv6w-hjxw","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"MINI-rj3h-gp23-63xh","https://osv.dev/MINI-rj3h-gp23-63xh","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"RHSA-2014:0679","https://osv.dev/RHSA-2014:0679","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"RHSA-2014:1052","https://osv.dev/RHSA-2014:1052","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"RHSA-2014:1652","https://osv.dev/RHSA-2014:1652","openssl","3.1.2","","0","1","0","1","2026A1769644800" +"ECHO-086f-bae8-9025","https://osv.dev/ECHO-086f-bae8-9025","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-3bf9-421a-e851","https://osv.dev/ECHO-3bf9-421a-e851","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-41bb-7a34-940a","https://osv.dev/ECHO-41bb-7a34-940a","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-5e35-7adb-017f","https://osv.dev/ECHO-5e35-7adb-017f","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-610e-0187-d683","https://osv.dev/ECHO-610e-0187-d683","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-73b4-18bf-fe4a","https://osv.dev/ECHO-73b4-18bf-fe4a","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-9177-1522-4a81","https://osv.dev/ECHO-9177-1522-4a81","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-9557-5d0c-3a13","https://osv.dev/ECHO-9557-5d0c-3a13","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-b945-0d83-4498","https://osv.dev/ECHO-b945-0d83-4498","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-bbe7-403a-c07e","https://osv.dev/ECHO-bbe7-403a-c07e","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-c300-439c-0dda","https://osv.dev/ECHO-c300-439c-0dda","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-e3dc-79c7-c66d","https://osv.dev/ECHO-e3dc-79c7-c66d","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"ECHO-fb54-b1c2-328f","https://osv.dev/ECHO-fb54-b1c2-328f","glibc","2.34-210","","0","1","0","1","2026A1769644800" +"RHSA-2016:1940","https://osv.dev/RHSA-2016:1940","openssl","3.1.2","","0","1","0","1","2026A1769558400" +"DSA-6113-1","https://osv.dev/DSA-6113-1","openssl","3.1.2","","0","1","0","1","2026A1769472000" +"RHSA-2023:3722","https://osv.dev/RHSA-2023:3722","openssl","3.1.2","","0","1","0","1","2026A1769126400" +"RHSA-2022:5818","https://osv.dev/RHSA-2022:5818","openssl","3.1.2","","0","1","0","1","2026A1769040000" +"RHSA-2022:6224","https://osv.dev/RHSA-2022:6224","openssl","3.1.2","","0","1","0","1","2026A1769040000" +"RHSA-2023:0946","https://osv.dev/RHSA-2023:0946","openssl","3.1.2","","0","1","0","1","2026A1769040000" +"RHSA-2023:1199","https://osv.dev/RHSA-2023:1199","openssl","3.1.2","","0","1","0","1","2026A1769040000" +"RHSA-2023:1405","https://osv.dev/RHSA-2023:1405","openssl","3.1.2","","0","1","0","1","2026A1769040000" +"RHSA-2023:3408","https://osv.dev/RHSA-2023:3408","openssl","3.1.2","","0","1","0","1","2026A1769040000" +"RHSA-2025:13240","https://osv.dev/RHSA-2025:13240","glibc","2.34-210","","0","1","0","1","2026A1769040000" +"RHSA-2021:3798","https://osv.dev/RHSA-2021:3798","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2021:4424","https://osv.dev/RHSA-2021:4424","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2021:5226","https://osv.dev/RHSA-2021:5226","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:0064","https://osv.dev/RHSA-2022:0064","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1065","https://osv.dev/RHSA-2022:1065","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1066","https://osv.dev/RHSA-2022:1066","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1071","https://osv.dev/RHSA-2022:1071","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1076","https://osv.dev/RHSA-2022:1076","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1077","https://osv.dev/RHSA-2022:1077","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1078","https://osv.dev/RHSA-2022:1078","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1082","https://osv.dev/RHSA-2022:1082","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1091","https://osv.dev/RHSA-2022:1091","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RHSA-2022:1112","https://osv.dev/RHSA-2022:1112","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"RLSA-2026:0337","https://osv.dev/RLSA-2026:0337","openssl","3.1.2","","0","1","0","1","2026A1768348800" +"OESA-2026-1265","https://osv.dev/OESA-2026-1265","glibc","2.34-210","","0","1","0","1","2026A0000001265" +"OESA-2026-1201","https://osv.dev/OESA-2026-1201","glibc","2.34-210","","0","1","0","1","2026A0000001201" +"OESA-2026-1200","https://osv.dev/OESA-2026-1200","glibc","2.34-210","","0","1","0","1","2026A0000001200" +"OESA-2026-1199","https://osv.dev/OESA-2026-1199","glibc","2.34-210","","0","1","0","1","2026A0000001199" +"OESA-2026-1198","https://osv.dev/OESA-2026-1198","glibc","2.34-210","","0","1","0","1","2026A0000001198" +"MGASA-2026-0022","https://osv.dev/MGASA-2026-0022","glibc","2.34-210","","0","1","0","1","2026A0000000022" +"RHSA-2023:2523","https://osv.dev/RHSA-2023:2523","openssl","3.1.2","","0","1","0","1","2025A1766793600" +"RHSA-2023:7877","https://osv.dev/RHSA-2023:7877","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RHSA-2024:0154","https://osv.dev/RHSA-2024:0154","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RHSA-2024:0208","https://osv.dev/RHSA-2024:0208","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RHSA-2024:0310","https://osv.dev/RHSA-2024:0310","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RHSA-2024:0500","https://osv.dev/RHSA-2024:0500","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RHSA-2024:2447","https://osv.dev/RHSA-2024:2447","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RLSA-2023:7877","https://osv.dev/RLSA-2023:7877","openssl","3.1.2","","0","1","0","1","2025A1764720000" +"RLSA-2025:21248","https://osv.dev/RLSA-2025:21248","openssl","3.1.2","","0","1","0","1","2025A1764028800" +"RHBA-2017:1929","https://osv.dev/RHBA-2017:1929","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2015:0066","https://osv.dev/RHSA-2015:0066","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2015:0716","https://osv.dev/RHSA-2015:0716","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2015:1072","https://osv.dev/RHSA-2015:1072","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2015:1115","https://osv.dev/RHSA-2015:1115","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2015:2617","https://osv.dev/RHSA-2015:2617","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2016:0008","https://osv.dev/RHSA-2016:0008","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2016:0301","https://osv.dev/RHSA-2016:0301","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2016:0305","https://osv.dev/RHSA-2016:0305","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2016:0722","https://osv.dev/RHSA-2016:0722","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2017:0286","https://osv.dev/RHSA-2017:0286","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2018:0998","https://osv.dev/RHSA-2018:0998","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2018:3221","https://osv.dev/RHSA-2018:3221","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2019:0483","https://osv.dev/RHSA-2019:0483","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2019:2304","https://osv.dev/RHSA-2019:2304","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2019:3700","https://osv.dev/RHSA-2019:3700","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:1840","https://osv.dev/RHSA-2020:1840","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:4514","https://osv.dev/RHSA-2020:4514","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5422","https://osv.dev/RHSA-2020:5422","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5476","https://osv.dev/RHSA-2020:5476","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5566","https://osv.dev/RHSA-2020:5566","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5588","https://osv.dev/RHSA-2020:5588","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5623","https://osv.dev/RHSA-2020:5623","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5637","https://osv.dev/RHSA-2020:5637","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5639","https://osv.dev/RHSA-2020:5639","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5640","https://osv.dev/RHSA-2020:5640","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5641","https://osv.dev/RHSA-2020:5641","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2020:5642","https://osv.dev/RHSA-2020:5642","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2021:1024","https://osv.dev/RHSA-2021:1024","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2021:1063","https://osv.dev/RHSA-2021:1063","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2021:1131","https://osv.dev/RHSA-2021:1131","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2022:7288","https://osv.dev/RHSA-2022:7288","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2023:1335","https://osv.dev/RHSA-2023:1335","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2023:1437","https://osv.dev/RHSA-2023:1437","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2023:1439","https://osv.dev/RHSA-2023:1439","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2023:1440","https://osv.dev/RHSA-2023:1440","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2023:1441","https://osv.dev/RHSA-2023:1441","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2024:5136","https://osv.dev/RHSA-2024:5136","openssl","3.1.2","","0","1","0","1","2025A1763769600" +"RHSA-2025:11066","https://osv.dev/RHSA-2025:11066","glibc","2.34-210","","0","1","0","1","2025A1763769600" +"RLSA-2025:21255","https://osv.dev/RLSA-2025:21255","openssl","3.1.2","","0","1","0","1","2025A1763683200" +"RLSA-2025:1330","https://osv.dev/RLSA-2025:1330","openssl","3.1.2","","0","1","0","1","2025A1759968000" +"RLSA-2025:11066","https://osv.dev/RLSA-2025:11066","glibc","2.34-210","","0","1","0","1","2025A1759881600" +"MINI-4x56-859r-prjq","https://osv.dev/MINI-4x56-859r-prjq","openssl","3.1.2","","0","1","0","1","2025A1759536000" +"MINI-547w-mfp7-933m","https://osv.dev/MINI-547w-mfp7-933m","openssl","3.1.2","","0","1","0","1","2025A1759536000" +"MINI-8ccc-42j9-wq95","https://osv.dev/MINI-8ccc-42j9-wq95","openssl","3.1.2","","0","1","0","1","2025A1759536000" +"RLSA-2025:13240","https://osv.dev/RLSA-2025:13240","glibc","2.34-210","","0","1","0","1","2025A1759449600" +"DSA-6015-1","https://osv.dev/DSA-6015-1","openssl","3.1.2","","0","1","0","1","2025A1759276800" +"MINI-fg85-78mg-4566","https://osv.dev/MINI-fg85-78mg-4566","openssl","3.1.2","","0","1","0","1","2025A1751414400" +"MINI-697q-w5vg-r6cr","https://osv.dev/MINI-697q-w5vg-r6cr","openssl","3.1.2","","0","1","0","1","2025A1748476800" +"MINI-j384-f4q6-cfjg","https://osv.dev/MINI-j384-f4q6-cfjg","openssl","3.1.2","","0","1","0","1","2025A1748476800" +"MINI-xxrx-crr8-74g3","https://osv.dev/MINI-xxrx-crr8-74g3","openssl","3.1.2","","0","1","0","1","2025A1748476800" +"DSA-5514-1","https://osv.dev/DSA-5514-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" +"DSA-5611-1","https://osv.dev/DSA-5611-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" +"DSA-5673-1","https://osv.dev/DSA-5673-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" +"DSA-5678-1","https://osv.dev/DSA-5678-1","glibc","2.34-210","","0","1","0","1","2025A1748217600" +"openSUSE-SU-2024:11850-1","https://osv.dev/openSUSE-SU-2024:11850-1","glibc","2.34-210","","0","1","0","1","2025A1746576000" +"SUSE-SU-2025:0582-1","https://osv.dev/SUSE-SU-2025:0582-1","glibc","2.34-210","","0","1","0","1","2025A1746144000" +"OESA-2025-2046","https://osv.dev/OESA-2025-2046","glibc","2.34-210","","0","1","0","1","2025A0000002046" +"OESA-2025-2045","https://osv.dev/OESA-2025-2045","glibc","2.34-210","","0","1","0","1","2025A0000002045" +"OESA-2025-2044","https://osv.dev/OESA-2025-2044","glibc","2.34-210","","0","1","0","1","2025A0000002044" +"OESA-2025-1581","https://osv.dev/OESA-2025-1581","glibc","2.34-210","","0","1","0","1","2025A0000001581" +"OESA-2025-1242","https://osv.dev/OESA-2025-1242","glibc","2.34-210","","0","1","0","1","2025A0000001242" +"MGASA-2025-0220","https://osv.dev/MGASA-2025-0220","glibc","2.34-210","","0","1","0","1","2025A0000000220" +"MGASA-2025-0164","https://osv.dev/MGASA-2025-0164","glibc","2.34-210","","0","1","0","1","2025A0000000164" +"MGASA-2025-0026","https://osv.dev/MGASA-2025-0026","glibc","2.34-210","","0","1","0","1","2025A0000000026" +"MGASA-2024-0173","https://osv.dev/MGASA-2024-0173","glibc","2.34-210","","0","1","0","1","2024A0000000173" +"MGASA-2024-0147","https://osv.dev/MGASA-2024-0147","glibc","2.34-210","","0","1","0","1","2024A0000000147" +"MGASA-2024-0026","https://osv.dev/MGASA-2024-0026","glibc","2.34-210","","0","1","0","1","2024A0000000026" +"MGASA-2023-0286","https://osv.dev/MGASA-2023-0286","glibc","2.34-210","","0","1","0","1","2023A0000000286" +"MGASA-2023-0281","https://osv.dev/MGASA-2023-0281","glibc","2.34-210","","0","1","0","1","2023A0000000281" +"MGASA-2023-0270","https://osv.dev/MGASA-2023-0270","glibc","2.34-210","","0","1","0","1","2023A0000000270" +"MAL-2022-4301","https://osv.dev/MAL-2022-4301","libidn2","2.3.2","","0","1","0","1","2022A0000004301" +"DEBIAN-CVE-2026-22796","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-22796","openssl","3.1.2","","0","1","0","1","2026A0000022796" +"DEBIAN-CVE-2026-22795","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-22795","openssl","3.1.2","","0","1","0","1","2026A0000022795" +"DEBIAN-CVE-2026-0915","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-0915","glibc","2.34-210","","0","1","0","1","2026A0000000915" +"DEBIAN-CVE-2026-0861","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2026-0861","glibc","2.34-210","","0","1","0","1","2026A0000000861" +"DEBIAN-CVE-2025-69421","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69421","openssl","3.1.2","","0","1","0","1","2025A0000069421" +"DEBIAN-CVE-2025-69420","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69420","openssl","3.1.2","","0","1","0","1","2025A0000069420" +"DEBIAN-CVE-2025-69419","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69419","openssl","3.1.2","","0","1","0","1","2025A0000069419" +"DEBIAN-CVE-2025-69418","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-69418","openssl","3.1.2","","0","1","0","1","2025A0000069418" +"DEBIAN-CVE-2025-68160","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-68160","openssl","3.1.2","","0","1","0","1","2025A0000068160" +"DEBIAN-CVE-2025-66199","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-66199","openssl","3.1.2","","0","1","0","1","2025A0000066199" +"DEBIAN-CVE-2025-27587","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-27587","openssl","3.1.2","","0","1","0","1","2025A0000027587" +"DEBIAN-CVE-2025-15469","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15469","openssl","3.1.2","","0","1","0","1","2025A0000015469" +"DEBIAN-CVE-2025-15468","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15468","openssl","3.1.2","","0","1","0","1","2025A0000015468" +"DEBIAN-CVE-2025-15467","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15467","openssl","3.1.2","","0","1","0","1","2025A0000015467" +"DEBIAN-CVE-2025-15281","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-15281","glibc","2.34-210","","0","1","0","1","2025A0000015281" +"DEBIAN-CVE-2025-11187","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-11187","openssl","3.1.2","","0","1","0","1","2025A0000011187" +"DEBIAN-CVE-2025-9232","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-9232","openssl","3.1.2","","0","1","0","1","2025A0000009232" +"DEBIAN-CVE-2025-9231","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-9231","openssl","3.1.2","","0","1","0","1","2025A0000009231" +"DEBIAN-CVE-2025-9230","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-9230","openssl","3.1.2","","0","1","0","1","2025A0000009230" +"DEBIAN-CVE-2025-8058","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-8058","glibc","2.34-210","","0","1","0","1","2025A0000008058" +"DEBIAN-CVE-2025-5745","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-5745","glibc","2.34-210","","0","1","0","1","2025A0000005745" +"DEBIAN-CVE-2025-5702","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-5702","glibc","2.34-210","","0","1","0","1","2025A0000005702" +"DEBIAN-CVE-2025-4802","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-4802","glibc","2.34-210","","0","1","0","1","2025A0000004802" +"DEBIAN-CVE-2025-4575","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-4575","openssl","3.1.2","","0","1","0","1","2025A0000004575" +"DEBIAN-CVE-2025-0395","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2025-0395","glibc","2.34-210","","0","1","0","1","2025A0000000395" +"UBUNTU-CVE-2024-41996","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2024-41996","openssl","3.1.2","","0","1","0","1","2024A0000041996" +"DEBIAN-CVE-2024-33602","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33602","glibc","2.34-210","","0","1","0","1","2024A0000033602" +"DEBIAN-CVE-2024-33601","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33601","glibc","2.34-210","","0","1","0","1","2024A0000033601" +"DEBIAN-CVE-2024-33600","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33600","glibc","2.34-210","","0","1","0","1","2024A0000033600" +"DEBIAN-CVE-2024-33599","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-33599","glibc","2.34-210","","0","1","0","1","2024A0000033599" +"DEBIAN-CVE-2024-13176","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-13176","openssl","3.1.2","","0","1","0","1","2024A0000013176" +"DEBIAN-CVE-2024-12797","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-12797","openssl","3.1.2","","0","1","0","1","2024A0000012797" +"DEBIAN-CVE-2024-9143","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-9143","openssl","3.1.2","","0","1","0","1","2024A0000009143" +"DEBIAN-CVE-2024-6119","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-6119","openssl","3.1.2","","0","1","0","1","2024A0000006119" +"DEBIAN-CVE-2024-5535","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-5535","openssl","3.1.2","","0","1","0","1","2024A0000005535" +"DEBIAN-CVE-2024-4741","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-4741","openssl","3.1.2","","0","1","0","1","2024A0000004741" +"DEBIAN-CVE-2024-4603","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-4603","openssl","3.1.2","","0","1","0","1","2024A0000004603" +"DEBIAN-CVE-2024-2961","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-2961","glibc","2.34-210","","0","1","0","1","2024A0000002961" +"DEBIAN-CVE-2024-2511","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-2511","openssl","3.1.2","","0","1","0","1","2024A0000002511" +"DEBIAN-CVE-2024-0727","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2024-0727","openssl","3.1.2","","0","1","0","1","2024A0000000727" +"BELL-CVE-2023-50782","https://nvd.nist.gov/vuln/detail/BELL-CVE-2023-50782","openssl","3.1.2","","0","1","0","1","2023A0000050782" +"DEBIAN-CVE-2023-6780","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6780","glibc","2.34-210","","0","1","0","1","2023A0000006780" +"DEBIAN-CVE-2023-6779","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6779","glibc","2.34-210","","0","1","0","1","2023A0000006779" +"DEBIAN-CVE-2023-6246","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6246","glibc","2.34-210","","0","1","0","1","2023A0000006246" +"DEBIAN-CVE-2023-6237","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6237","openssl","3.1.2","","0","1","0","1","2023A0000006237" +"DEBIAN-CVE-2023-6129","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-6129","openssl","3.1.2","","0","1","0","1","2023A0000006129" "CVE-2023-5678","https://nvd.nist.gov/vuln/detail/CVE-2023-5678","openssl","3.1.2","5.3","1","0","1","2","2023A0000005678" "CVE-2023-5363","https://nvd.nist.gov/vuln/detail/CVE-2023-5363","openssl","3.1.2","7.5","1","0","1","2","2023A0000005363" +"DEBIAN-CVE-2023-5156","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-5156","glibc","2.34-210","","0","1","0","1","2023A0000005156" +"DEBIAN-CVE-2023-4911","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4911","glibc","2.34-210","","0","1","0","1","2023A0000004911" +"DEBIAN-CVE-2023-4813","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4813","glibc","2.34-210","","0","1","0","1","2023A0000004813" "CVE-2023-4807","https://nvd.nist.gov/vuln/detail/CVE-2023-4807","openssl","3.1.2","7.8","1","0","1","2","2023A0000004807" +"DEBIAN-CVE-2023-4806","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4806","glibc","2.34-210","","0","1","0","1","2023A0000004806" +"DEBIAN-CVE-2023-4527","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2023-4527","glibc","2.34-210","","0","1","0","1","2023A0000004527" +"UBUNTU-CVE-2023-3817","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-3817","openssl","3.1.2","","0","1","0","1","2023A0000003817" +"UBUNTU-CVE-2023-3446","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-3446","openssl","3.1.2","","0","1","0","1","2023A0000003446" +"UBUNTU-CVE-2023-2650","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-2650","openssl","3.1.2","","0","1","0","1","2023A0000002650" +"CVE-2023-0687","https://nvd.nist.gov/vuln/detail/CVE-2023-0687","glibc","2.34-210","4.6","0","0","1","1","2023A0000000687" +"UBUNTU-CVE-2023-0466","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0466","openssl","3.1.2","","0","1","0","1","2023A0000000466" +"UBUNTU-CVE-2023-0465","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0465","openssl","3.1.2","","0","1","0","1","2023A0000000465" +"UBUNTU-CVE-2023-0464","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0464","openssl","3.1.2","","0","1","0","1","2023A0000000464" +"UBUNTU-CVE-2023-0286","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0286","openssl","3.1.2","","0","1","0","1","2023A0000000286" +"UBUNTU-CVE-2023-0215","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2023-0215","openssl","3.1.2","","0","1","0","1","2023A0000000215" +"UBUNTU-CVE-2022-40735","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-40735","openssl","3.1.2","","0","1","0","1","2022A0000040735" +"UBUNTU-CVE-2022-4450","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-4450","openssl","3.1.2","","0","1","0","1","2022A0000004450" +"UBUNTU-CVE-2022-4304","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-4304","openssl","3.1.2","","0","1","0","1","2022A0000004304" +"UBUNTU-CVE-2022-2097","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-2097","openssl","3.1.2","","0","1","0","1","2022A0000002097" +"UBUNTU-CVE-2022-2068","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-2068","openssl","3.1.2","","0","1","0","1","2022A0000002068" +"UBUNTU-CVE-2022-1473","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-1473","openssl","3.1.2","","0","1","0","1","2022A0000001473" +"UBUNTU-CVE-2022-1292","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-1292","openssl","3.1.2","","0","1","0","1","2022A0000001292" +"UBUNTU-CVE-2022-0778","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2022-0778","openssl","3.1.2","","0","1","0","1","2022A0000000778" +"UBUNTU-CVE-2021-33574","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-33574","glibc","2.34-210","","0","1","0","1","2021A0000033574" +"UBUNTU-CVE-2021-23840","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-23840","openssl","3.1.2","","0","1","0","1","2021A0000023840" +"CVE-2021-3998","https://nvd.nist.gov/vuln/detail/CVE-2021-3998","glibc","2.34-210","7.5","0","0","1","1","2021A0000003998" +"UBUNTU-CVE-2021-3712","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-3712","openssl","3.1.2","","0","1","0","1","2021A0000003712" +"UBUNTU-CVE-2021-3711","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-3711","openssl","3.1.2","","0","1","0","1","2021A0000003711" +"UBUNTU-CVE-2021-3449","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2021-3449","openssl","3.1.2","","0","1","0","1","2021A0000003449" +"UBUNTU-CVE-2020-1968","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2020-1968","openssl","3.1.2","","0","1","0","1","2020A0000001968" +"DEBIAN-CVE-2019-1010025","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010025","glibc","2.34-210","","0","1","0","1","2019A0001010025" +"DEBIAN-CVE-2019-1010024","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010024","glibc","2.34-210","","0","1","0","1","2019A0001010024" +"DEBIAN-CVE-2019-1010023","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010023","glibc","2.34-210","","0","1","0","1","2019A0001010023" +"DEBIAN-CVE-2019-1010022","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-1010022","glibc","2.34-210","","0","1","0","1","2019A0001010022" +"DEBIAN-CVE-2019-9192","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2019-9192","glibc","2.34-210","","0","1","0","1","2019A0000009192" +"UBUNTU-CVE-2019-7309","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2019-7309","glibc","2.34-210","","0","1","0","1","2019A0000007309" +"UBUNTU-CVE-2019-6488","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2019-6488","glibc","2.34-210","","0","1","0","1","2019A0000006488" +"UBUNTU-CVE-2019-1563","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2019-1563","openssl","3.1.2","","0","1","0","1","2019A0000001563" +"DEBIAN-CVE-2018-20796","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2018-20796","glibc","2.34-210","","0","1","0","1","2018A0000020796" +"UBUNTU-CVE-2016-20013","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2016-20013","glibc","2.34-210","","0","1","0","1","2016A0000020013" +"UBUNTU-CVE-2016-10739","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2016-10739","glibc","2.34-210","","0","1","0","1","2016A0000010739" +"UBUNTU-CVE-2015-8985","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2015-8985","glibc","2.34-210","","0","1","0","1","2015A0000008985" +"UBUNTU-CVE-2015-5180","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2015-5180","glibc","2.34-210","","0","1","0","1","2015A0000005180" +"DEBIAN-CVE-2010-4756","https://nvd.nist.gov/vuln/detail/DEBIAN-CVE-2010-4756","glibc","2.34-210","","0","1","0","1","2010A0000004756" +"UBUNTU-CVE-2010-3192","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2010-3192","glibc","2.34-210","","0","1","0","1","2010A0000003192" +"UBUNTU-CVE-2009-5155","https://nvd.nist.gov/vuln/detail/UBUNTU-CVE-2009-5155","glibc","2.34-210","","0","1","0","1","2009A0000005155" diff --git a/sbom/server/fips/dynamic/bom.cdx.json b/sbom/server/fips/dynamic/bom.cdx.json index 9bd55eda6..706d52f14 100644 --- a/sbom/server/fips/dynamic/bom.cdx.json +++ b/sbom/server/fips/dynamic/bom.cdx.json @@ -2,9 +2,9 @@ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, - "serialNumber": "urn:uuid:24c6d7a6-cdca-4a09-9799-24d8acd908c4", + "serialNumber": "urn:uuid:6c339dee-cc13-4849-9c91-8808c3692a99", "metadata": { - "timestamp": "2026-02-12T07:13:22.927788+01:00", + "timestamp": "2026-02-15T14:34:42.385921+01:00", "properties": [ { "name": "sbom_type", @@ -20,19 +20,19 @@ ], "component": { "type": "library", - "bom-ref": "/nix/store/jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "bom-ref": "/nix/store/hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "name": "cosmian-kms-server-dynamic-rebuild-1", - "version": "5.15.0", - "purl": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.15.0", - "cpe": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.15.0:*:*:*:*:*:*:*", + "version": "5.16.0", + "purl": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.16.0", + "cpe": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.16.0:*:*:*:*:*:*:*", "properties": [ { "name": "nix:output_path", - "value": "/nix/store/4khk99768xj54lmgycv5nyiwzp2cgc7j-cosmian-kms-server-dynamic-rebuild-1-5.15.0" + "value": "/nix/store/sw1q49nbj2dp484qq8gji8aq59z3z20h-cosmian-kms-server-dynamic-rebuild-1-5.16.0" }, { "name": "nix:drv_path", - "value": "/nix/store/jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv" + "value": "/nix/store/hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv" } ] } @@ -94,7 +94,7 @@ }, { "type": "library", - "bom-ref": "/nix/store/85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv", + "bom-ref": "/nix/store/ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv", "name": "openssl", "version": "3.1.2", "purl": "pkg:nix/openssl@3.1.2", @@ -102,11 +102,11 @@ "properties": [ { "name": "nix:output_path", - "value": "/nix/store/gadgj85i4b9c8i9vgg1b1xh8a6bw71az-openssl-3.1.2" + "value": "/nix/store/q4cy8l5brp85ggx69wd4aakvjs0d007s-openssl-3.1.2" }, { "name": "nix:drv_path", - "value": "/nix/store/85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv" + "value": "/nix/store/ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv" } ] }, @@ -131,10 +131,10 @@ ], "dependencies": [ { - "ref": "/nix/store/jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "ref": "/nix/store/hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "dependsOn": [ "/nix/store/74hh5shwd63bla2yyhq17c2irx1y528w-openssl-3.6.0.drv", - "/nix/store/85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv" + "/nix/store/ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv" ] }, { @@ -153,7 +153,7 @@ "ref": "/nix/store/f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" }, { - "ref": "/nix/store/85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv", + "ref": "/nix/store/ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv", "dependsOn": [ "/nix/store/9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" ] diff --git a/sbom/server/fips/dynamic/bom.spdx.json b/sbom/server/fips/dynamic/bom.spdx.json index 6e5ec61e8..daa02d148 100644 --- a/sbom/server/fips/dynamic/bom.spdx.json +++ b/sbom/server/fips/dynamic/bom.spdx.json @@ -2,10 +2,10 @@ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", - "name": "SPDXRef-nix-store-jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", - "documentNamespace": "sbomnix://c5d2c0ff-e1bf-44e6-b10d-7537b0936cb8", + "name": "SPDXRef-nix-store-hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", + "documentNamespace": "sbomnix://6e0a5878-a45a-4af4-a034-345e54938ecc", "creationInfo": { - "created": "2026-02-12T07:13:23.707837+01:00", + "created": "2026-02-15T14:34:43.175042+01:00", "creators": [ "Tool: sbomnix-1.7.3" ] @@ -14,8 +14,8 @@ "packages": [ { "name": "cosmian-kms-server-dynamic-rebuild-1", - "SPDXID": "SPDXRef-nix-store-jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", - "versionInfo": "5.15.0", + "SPDXID": "SPDXRef-nix-store-hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", + "versionInfo": "5.16.0", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", @@ -24,12 +24,12 @@ { "referenceCategory": "SECURITY", "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.15.0:*:*:*:*:*:*:*" + "referenceLocator": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.16.0:*:*:*:*:*:*:*" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.15.0" + "referenceLocator": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.16.0" } ] }, @@ -98,7 +98,7 @@ }, { "name": "openssl", - "SPDXID": "SPDXRef-nix-store-85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv", + "SPDXID": "SPDXRef-nix-store-ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv", "versionInfo": "3.1.2", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", @@ -141,14 +141,14 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-nix-store-jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "spdxElementId": "SPDXRef-nix-store-hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-nix-store-74hh5shwd63bla2yyhq17c2irx1y528w-openssl-3.6.0.drv" }, { - "spdxElementId": "SPDXRef-nix-store-jhxpdvqsh5v3jwfkfc27307jjj3nrhi3-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "spdxElementId": "SPDXRef-nix-store-hcc1i493434q9wriv6cycgli74yy1j6h-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "relationshipType": "DEPENDS_ON", - "relatedSpdxElement": "SPDXRef-nix-store-85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv" + "relatedSpdxElement": "SPDXRef-nix-store-ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv" }, { "spdxElementId": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv", @@ -161,7 +161,7 @@ "relatedSpdxElement": "SPDXRef-nix-store-f4gxp7xg2w1y7i9cr1844a2jfb8d3yrk-libunistring-1.0.drv" }, { - "spdxElementId": "SPDXRef-nix-store-85lvwfgnpdbkppfalflqcd067jxbhl0c-openssl-3.1.2.drv", + "spdxElementId": "SPDXRef-nix-store-ziagfxa8arz406r32rqn0dllbk9aia1v-openssl-3.1.2.drv", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-nix-store-9lj1q8k38i7k8z4isnhb5j1h4n2hhjzm-glibc-2.34-210.drv" }, diff --git a/sbom/server/fips/dynamic/graph.png b/sbom/server/fips/dynamic/graph.png index 0d9ebaf40657f8e7cb8ec95a853f6b9790c29aec..a455385102bfc72df02de82e07111924e77323b2 100644 GIT binary patch literal 15672 zcmcJ0bx>AY_%3##U;z>$1|TXWp`;=PEl4XZ(jp-pDk6){v~(&RA}O6x z_t|)UbLY<7zwXSPGv^!+=i}RZul26?eQJB$l)k=qH}!535|X`QH$>$~NH%xj&n`Q+ zN!=c5R94q9p6YU#|-j{YglUk%)<2mbVH2)9HApdSQKW>N@4|XP%yC~>Nw`+n!poKvC3#Ne`H*Wm0}^XRJG5#~VgQzAPVo|22WzdfY$W@0D)g#WbJ zf1~f*#ves5z9_!^?*rzVsS_j{KeT)}SVPCEmM>~($nyNCV1xCAzKe?4_oPOeQ?Aea zuIAujjR;UVU`l+gyndo|g!bG>^Vp9p7o*nnVSd`FCmh_|CDqkFmtD4V+$|?hR!mbJ z%Okz3cyQwvL@C+S?|yx{Ypng<^WW8BjUTN|!y_UL>SMP3{{1^RICzL(bc$9&Muv%p z=hb<=8gg1%$(uLHo0AoEepiJoE-oHQq!hUJ-^H2N*Ou9CB}$icchlS3+uy4R_we%a zD*ASS?fpmViN1-6+UbGs25mW~*Vfjq7P6h1qQKLOmYB`_mMSPHc<;E(bN*hH=8sG* zD(cER+1&HL(OuM_{@y36*u z-+kF$uKOLqbEB>Oqod!Mq8z@iuXeA$3=2zXESi20PptJUD<`L4q@aC6x*EUJ(g0<$ zQbzj3i>Kv5j~{RHXO#Nd(n5jDuqY%yjf&EUUKabeFNNY_Vqd<0_u9UfI@9Wps-%?E z9GxFI-*EdoHWJ*KP+nf1!^%|Iww9nz-5a}?(PcYG$9ewz&rB_slbwCSiKg8}4r@z; z-t@welarI1M=QSt5<6cPmUjCcr{-r8tBEe3*x1;jZ~J4E1H?}`F3+Fh=MOt^-B(jn z^L1KimEm!s6jp5(CmGJ&&MU5{*yZf(?C5qv)Zme>htDc*~BQ`~LrmdSJZcgT;@ZKeg`Ojhndnlvx1}&xpF3 zowf8a@w3^3eU0fTDJhZ7P#1J`V-QWs&dR!+B=7g)#p^67#q>i&wS2Ij?Ai2iw58da ziY>J|jMrjrM1e##&)6d({R*NJmtb`p|gMt_Nv2iDlobzR7&3xU9@#dETUGd7Qs3$KacFx1(FptK^E0 z8M$;Cb_K3Pm8!FE*|D$q+c%d}60e2|WJE=`@|t%2LZu}*t^Q3m$JQrEg_Vx|%nlKD zE|NBxo9K?p$>F+J8(Cfc@`M+y@aL{Vd)v{pcgp#eNy%qXNLt^XaX7CzjI?Idew-+} zotpREb9Q6BMchSlP1+R$>x4`ud%lp+UNjdS%=;2{ybRiOl z)974=N;V@&Ad3Ra6o+`&zoN5YxO(-f+2W*@+^t(lY9D!6Sy@p~H*!~h?jRQw6x_9M z-)}TG`6M~lRt@I}JgcF}aznhtQ&-oQk&(W+x!mL9<3E1s$l>C%XU}jBizM6FlF_U- z$=EfYp+2&4z}zXt6%{FjgoG?dnml@XG;w=B^Gs;=?b}Bj-e13dy&3r}_~^aeoFTUU z@})~8Vq#*(KQbS;s@v~%6^X8&eix36QZnoExlsub987`3E+ zDJyf^OT+UbAfVXqlmyz>@v~F{-|fR2ZM1lgZe_q}vjb+!qk&E{R(^pa{R;z1>NWL!lj=-Kf;qt^?cca zF}eE^zHe%7?wonyN;uy`PZUJ%TO7dp0$YpRw~6+(E>E6N@fcGL)<)@ld$!m0XzW=G zcpUe#c!{8$J9pNN3UqCI`LFe{dAqys#F}U3<~9%QPrLJhb1yYl4{BQU+O_0!yJJlp za?;Y$lB*NjdAPZCy9#U#A6i&gY?ANKk4iAvCUgG$dGyZMzeO0{XVnXWlWrv@mxl3Q zxKLMUZ=L&8wbd@ZqOtKHFE8(tCr>WePM@UXvt;(~KXeyEI{bp!6YRRSfq}|+S*t?H zs0-!Bu|1K`nmj$$CuHl9&HB*ChkKcO@7}$5TwP!XL!I)Oyy3nG>#p9)z%wh0{m+|{ zZn>fE&^~uy%v@GfRD3yV&{*VX@8IazTon1|PYdHj(2MUuY@?Q}@dns%jEaE3ZYAP#_V+dg8>Q^b6_m}SV$%~1Neav(| zlH}j4c#0`@ZF*#MRH8l4#CB;Qh=Y@p#k>P&kJxP7Ut_kOOwrPB8ee*0UsUnq$B(hq zc{k=fb*e+TlP#QZ5Z{ro^YXG;Eth1Wfm57QEymB9*UVqMe2IGBQ^`%C_TRl7mk<|k zu-;jst)=w^tx`fnWb>!h`LMP;-S4l=*4G?My^qB56w&lxlFB~hb2yc9mRHGJd;^}>C2E1mDKkK4;~ERF$p!ayJFMO*!A8_M?v6fk`gUi zf>uka3iYQ5IV(5EzHaq&YwR>Mn=}r(J|DPdj{22XRXW^!f(wQ5)$I@cQ|pZ^CRW$ z+qYTO3vS%Fv6J3ma+8L`lxwMwY0(nnZr3NdMy=Yqx>uEziE=J$ZB^oq-SruVy}YXG z?&4&xjh$UXj=?QIfB&B!ESPYLf4h(gk@Q44uQ8z6rKX+8d8BR#^o^~#kiYm5D4 z_(6GPrAYM6p7C*M9FMGb?-FmnyKiG_tEH=3@~8dXE>hAs9Jb{6`n1$k%j9>qGxuU-Z8GlB2t5YqHy7;ii*nC?b{DfQN7up zA*82V@%*t|>lbO_K#;FTWoMt)($b1rR7&%NIAV4_Qqn%l7W^<@|3JmVwi{U$P9%Q#__2RzXs3YfqZyRc$&)8F@7=qGIyY#~ODmn) zld>?|cS(l+)9Y5!NYb*4cC*a9_d9yVJ3ltPk=+7}O-o0|U78G}k*)ikqN=KjOEIKM zq9E6nXR0P6!gUYj^x{;%gAO+*XM?g_kpLDXV*XFNMPKnQKC7|C*#s)F4ZtCL7aP=H zE4@snNoHhfcS!--L|biRvZ%*<1-q8T@u2qzxM z+sDUtcIc(*QlpOhL|5T=9Id6%j8ElQz=j67<`a<-5mHuGR<>^EL_@yYlj%ovCKR~r z$FCPV-;$QzH#Idy3>Eu@@nJ4*4gBE4hYwU#R1ZLUYQitNBqg0jZ8DxX5lb7xS_H(G zZ8N3aDUuCJg=e?=KuUcu?%djhkn1 ztdE~QEoP!$kv*eibSp{j)KOt4@7UNAfB^B<6J5j=d%temym@owbdLB{;FU__-Xl{E zo}Qjxi;K6?(9rmp#J{r9)73Sb>bvUa=f|>Qnu%u+y?QfV{P5YcXEU?28{7C551_zK zGBNpwhKf5l2$-3fQLiT?B$$u3oKqlEJBpq@(vs%o@;q^InVOwFdF&X8p57p*x1#&oM0u9spV>?V9_uc0Y)c-Bv^f(fPEZ7# zeB0$e??SNcuU@^1r^zCKwax6%e&Myn6QKC97K1g$Z8=FzWsicM2|4~{2fpjF8$IV! za?7$Aj6GewP+VVM-*si%m7QuP0Hhc^X4AjK0Q+LoJnws0-@C^Me2m8T769tmUK+)} z^}F$8BGn%(25oTVB-z;Q{MO@f_`SdTlA3_d>j4WBWTI+)n)$|FD}{GT%e$!SW@sgJv$+SId|gNu}94*N)ipk zgbT>#dpMGb7DqyG6Gg>WktbLjZzV`-4b??^(_ZvDqm({`@3TyhXCZcd|Ni}WR*C@2 zEv~6|mcSu6tjF(Au&H}{c}XN~XCbI`r?Rqg=KW5-nkeDg#3-lai3j2l&;W$jSI*;< zM580n3fjqcGwhOm<3>h5-RnmG7MJI_-|@zT;^5w;ecZO-p*ROD;4Wv?@^hM84inv= z9^14F3c}ZK-wZ&BioTtGNOn{}6BCqBWVY?0n4E7n9pyjCkRvWBSqwTJ98ASy+Lby= zp0wf?irFqFCl}0PqB?x_G%?t=ZNp_48!JRT*5;}cr^f<#i3t! zEG8yqmhKff3xQuDyf85_H8eJ2Qs}>ol&A}}NlZxS8yqbARpFnNm&cl`Nf1m~2OQ+8 zNWrk!>(AdBwX!<8-C`sqB@I5Ww=X(6Ixa4*XKbu0PR#$k%~VX$m4j@V%L@}T?WUi4 z`})2Ttdm`9b0TWPTDN6IpU&{@-HHR?XxBtVpPuzSf!mg6UtL~E1gY4%b?Xp+0B2xW z*!N_Gl*ySH%tJp$snEK32};!*{l~7Z+XBxhwOG6NT}0hqGd4b}R~tD14ogB5R>r5b zP$hNS_zO~oQPOo#u!tG}DDt~{mRK9Pg)(~QNz5d3v`5Mq7s({~0~8dczI6N-F#k~k z=xl;P=L_6Dzg1O{qII<8nRsEWsjI7FW~ZE#GGy!msgJwnL%lNjjf|A`LgwB58yZAY z=LZWnh+)~*6Y2tjf*@JsBD|qwO6vKR9%awz8}lC;Ic_~k+=Ga+s;ah*&bOtR!8tll z@|c}m2PPI5ZAidgmBzmiphAR~hleLQ>ZgeN`gWh{*u!Oz6y*RXz3Qrg0E?15^&W}B09x; zLc81>Q$dVdwzv$MvzjtQ>TP2^!se;h@!rgvhF3a+zWm`x)0fs(N(e-SCC9`yat)g& z=jI^nTIgHSfZmK_-3va#3p<}Pa3 z4WGg0 zObiU0P!Rdn6TX3g3Xe_XGt?t68qw)5L*2q1GtX145QJ}awYd^!XV>oCEK^H^r^oCl z6PTCv?%jK9+AXB5t-PUy4{~a=HEXYr62*ABE%c{=bafE!lAsT>OFJrUS21dncbm)0ep)>A?F%d`8%3% z^3-z|3In%w+EsT=40~kM<$w z*33tmPDAjuooiOAsH!@N`$1GC?1 zA_AXSI;bY<>TVKpAf<-GW%NM;<%gLTMT2!3o-q(on?O6lxeG+k@9pXNjDw;u2ZlA& zlynd$rMR@z51JC8F^2J&{K(dO-j*d3e&Ml5bPquNU2uis;$m`YYH`5xrIndl2yFLe zhw2GB0MZF9D|-Ih^iM0$m;@Gkzz);GIg0!D??VlI8W3;@_~|O~wJ3uk6GCBH=(2zQ z<_)uSlu&i1);IZG3TA?Uc{o|*`}fO^3~B_7rb)@p3tJA6o3!T*q+}Ew7ZQprFTa5{ z@;EFkjHTXTzC$tnP6fmS4|n$-^tr{QB{L|@z)Z5thX~qsA_1)++n_Olli%ucONNFF zgdT!Z?b@~BRPc5?_&Bpp7tecvpWmo}F^ty~>>7|QMbW9}^QJ?)w_(^fV{;Rk7o=>Vs0wvEEuU*mS3AMS zN3Efu0fpCc}(UGw~T)uPa6OL?|z z*#aVVLt2`(v&WUZmTllXff}|3oIZVeVD0eHqv;^7$!`IQD`|M|zp2EQq*z*8D?z{r zGn@ly>331$G zZa<`|+q;pvaB^_SDhL@iF`s(f0rgb6br$lk;^s;SuDasl zp3^H!GnHtDr=gGB_Q{VoTf6$9tF6egQ&>RYj)9?JvT;M42PY4YVp;+ER3*BLk>ET0 z^UT2m2jmB!6e*#{$OC{%pL#tDzTln&lv_#fv>09G8_}J+bMIaSY8sj|f5yfFpnl5- zMqMxyA-;BN05&~&`t#?{n`^a(8{$if$~^7YUzOO4wbpt(DcWr><@uL-u&@?NNK?A* z&6_V8uu}%6rWumb(u#rhc6KbAa*h1`{9;yq`O5@6;yimcwQltFpH;Q+xKE}X4s zQDhf0#DAl-_R;2)#CK64I7gMwh5ioxr0*AT_Z&5J9ht&#k0RhBoEHxCU!_1AYHCiM zQqsQ*6B)7@7%a(lfI|gv)6fQ|L8Uhn1mpgFR=t{VSwa^-fEysR6V-ky0h`RW%xBod z7_f`ZkMG)|g6U{!p}as-%d4{>KCI!qn%j0k3U%4#v}}S!7k%&`vt{)e>5&*7%hLM# z{WjA~>jK@*>w>#oMdmQ9S<+1C_^rIr962A3$O|p~@^{cVSFto|S2*LP(z*)mRt$s! zGP$91^8JqY94InE9|cJ>2ycf5#*V^q6o%J`{#;{}QFsl9cM-E0d+lqujNS!7PnL#E zwXLjXLN!&rFch5@D|7;=ETJs}(oO-+0`(v3;Re?{lXgQvH#D2=`)J=}$*9x1cK&zN z<3cletdp(8Id}l*=xHH6cTcTD7m&gTvp52xC-~MJHnUERLX1R9_z~^QcuaR%0`#k z4Ep#Rfq<3fp;@K8%BoFiO;tJXV`r;t`;bvOyc~ir6}u)0YNn*KlMY~tC_bkiq3Y7o zYk!st$h!2t&o~_$ef#LKhsQ2(QbIICLjl-_N^**WWB;YOiR?(V%Ulx-(J`!{nNF*A zPK&)e0>pKrbyy_K*GfKg$uvG(FVOXqiQtQWb$4?|kt59`9K`VOaERGp;oUmV>G)s0 zJaPT4`G9!Q%Ctm}7$*lhJEw3SkL|4pgRqL@pMFv~I5fhc zGvlkbDJD*-2{T!~>^73?Xk83cQm@zl-qP|4GYL4v=1*>`rEl7MPmAs$FQ7vbSjK1P z@@692ZJ^R|MUo|{7xED(x7WC(rDZA4-}*Tygud}DmOwyoSsWcX?>jrE1X6B#SZfKA zT}=vF&j^@#h#} z)!n&sN545aur%+WA9*thrgwi@ncj1dN%|y&qAPAkCcJD&NN9VBEWo}b!45@= zGS;!V#ykzDjFQ`?g(V=7X;%9n>FKPkEG^|_d>>V9TQC*dz!XE%Ma*Li12ILVZAbIv zDYRtYuB7Xj4cT=MnMYX4hFf`>n|QKJ^j3g71P%QFz1&pC7vz8`56Z^cz-BMvPI=o^ zyr3Q9A2?uv0krbMgq33&W=G_Ux5iT}L0GyLc&SI0oYH!+;Y)E0b5C zeA)u@LI9Cnwy;wP1;~f;M1V#U@l+g#Y;ZA7;Wb!|*MYKCK3bha9~zh+_o3dJz~*VUQh`s3EQrqde=lE+mB(?RPZxLdFz?JZ`(b znFD!=diCX_OMqWW_WEoYyoD!GW&!b#Pyjnhz(KkEI`&YqlB|y|u}b0gzLb_e!vOXV z2}$Bj_tCaR^9{Zk!HOTD;)02z6 z<|FqDRuLbI0qa^^UiJ?Rj91ivmJhY; zIN2W(n}tqme6ilox4Hz7dM>=C94oCtx2yuDQ~cvcFdUW#Fc}nx#Xe4Htu*!5oTrx2tL2nSRHc|uW956WmjUFdLgx|h-{3(U#N40e6=vqt%sRv z*bd}-$;ygneZhG>asK-yr!uGzEW^XYhC20t!y2zx)x?pP5Ep0+Anz;D;5VZRR`7$Z+qMyyaNkjZ@^{@%-+gF!mES*zPNuA^t$qG!eeE{4nv$IzAFQ2w zyXkOw-MSHq*1qI2273r63m}rKBfoTh6ny_dw2Uwb@w< zw;nl$6sHFRzkacs^@)P@rcb?yc5!iO*`|d%6NP5ZRT&WxVP<93!ra>8TUaPan8ASb zU}RvqUujGW04Vp$pU)gRAc5BFH7g+twJO(F#~GdAq0l|qnorEFx5Hw_CdS56^LL;& z0G@gqWrX7~9jVD~4OriA`&BLZl9&G(4^aerVX%S3&yRP)(AbThpa=gj94U~`1K)%J zp+Kutdd9e~ekcVWeMV06GdHx zj)_V2RDan|s3;g4T*g0M;KZ2yD&Mc}w4@u+Up=v^*0G#$3`cGPjK0sWU6{ zKH?G-M2U*(hhI&Tt+S4QBHrwkThbjJQ&MS%AdiMC{QN6he4c?n>!H4W3$XXqs6u5i9KU~C`48k zboKOt^q(DL5M64dGW6rE;Sdy5Gm(rz&P-fNO1B|S?9TfKkAd~!(i5l}u{Du^Xhf5m z3zj#;yQ32Y+bD9XRal z;UbfCIP`e-;9LsW&EDwlbstoQ zn3bfIaTGnZ)#gpndoEQDcJ|lTpC5%*b$yiU?uOW&0h1Ivxcc>E*Z&UxUE$76ARj1c zYC42W0Ag#!FBq=m)Re}Z@llZ?fyp)0nn90ydLgW{3nJy=8z2{0!2fx)p?t2pNJ}@YdASDlJUB)f69<{u0|A?=kn>x2>^KPN2Gk+=q6I+= zN`|*RuMf3BWQItPKzRM`dH9StlN}+52K<1Q6AYD}lJ!oV?f%&HPzWqRNHicI_#7t) z+y+hfYPXgLWd|N@YGFYSxf3+(L(b0YFGORTGbhjx61gUb08CA{19J1{xmY*FcHbC3hOq3tigE<~_XJ-M3KFxvd-o)+8VATiY$)=J(MPDL*bN#^646A( zROK&&QO@a&PTPEUzst?lMT09q?&e2ZTcxEgvGqqW^*HhAqQ4_&Ad(Rth8ns8&MB9E z-6Na;ZO~<;8|%d2H*K;ZWUSoW0l+xc%%Xa1n;wOHGz29g+5zJF1hQSe)gKm}G(y=n zf9tqx)#beI2vS;$oC*rB&iY1tI!+#TXFoalu@p1U^>9QfNZ1|!T6Wp=?}ZyTof4|r zLp71O3V22ES7hR*(9C2D?dIfmD-n8lZDn<}E+%U-M;w+d^}(42Mn*<$6BD%(( zk2Y=jQE1PLos2&eLOvjoB;WAPRD%#Q&41l+`gDv^pmf=QFsso^(Bi2@LD>;R3dAm6r*;2dc*bb}E)%;v5Rk2jzW2Kp-6J z_4{_l4V`Q1_J6oRdxp9{34`00H8%RA2rB&22!ChS=|FLi?b03e4ws-bB2+Snh1@2s zUlH#82^0hicdEnyD&fY^H!Yn2S_k}!NKLT!;RnB)zklVWi9S(_&|C`s<;reL<45kyHUvHGBB5q^m0u2)=^-5OIEXKr=pe@nQ%@KC)s+ z*v5iEIUp7@i!@x_Y8aP+2yB9pWdv$8b#$&^8Y`?rL^29cxqUn6{SHA!#%Hi#-W0)@ zU_>+!J4nnnXmhed^2Jd8FI>2Qm{rVylH;OR%^;P-4gOK&$X{r`;ACa-WyWT-4;&cI z&I5>N5Vo&tYaa&+I%Ob-?X_VD4h=kcM{_j%mdG^5!op}{V!^DSi{_$6R_qaBjW*jdKtLf?@YUi2p|MQ1r<3t zzcwetmt(;u3A_8Roe%68Nq=VV*M(wvF zuC$+6Ma`C$maXXAprEEYQ{P~WYgB%aGyr+ECx=25)I}+Eo18U??JBeTKty$T@xWegstY!b8!*v znGousI%jH^cyfB)+`0PxLGR}D^z=IjzJg;27M@P{9C&6UM4E%#19Q$h{)xvDh~y9v zSs*;9QPAAk|I2|(*L&)jbQOf8C}nJxNpPK=o^G)1hL`$a><0&;K3Q+yenshFyD883 zLPazOO^4{5i62)~cmPmQCiy_RArLwm+8fne7JvXlvb9(5z*#mSTNRxp_3HITZ1*K> zg{j3Uo!qwtDw5zDL<$_?J|X9|B_`|fj$UBHvv=OVfVYkL=qs1xz^c@{!e)!OGqOpT zOhfYPKeBXi>vgf$$)v+Cd_g%PV)q%Y;HE9xU%Yyy7}vkNv{a8k8lu$I#Q!BFMNHZQ z?#ytLqLDu?xRHluev9ydj;7`#fX(u9 zcOH{AB4P)(41mYh$~fhXCX^_5tfa)Nv-P%7ID~|cK#(s00fhm`7m{H-K7dl^5qXGc zg93JxP}Y!1%Q0$|R!G0ej9hlSw8^jEzxyCq;H+P8SY*fK-258yr(`IX2kiN2!X$QZ z8o2x~Sbr!aE$v)nWTfSvwm`fGP)>c6?GYd|C$5kiN27_}MqCpVa;T{WkWeL4a}z+a zf<*qNF8c{V^pJ;!deBh_NDRkX9JxntDvr&oDXA&V>V12kmzVH;T)pA~fpaLYpi(Ft6oQ&c*@o#wDfP;&x>7v%Y zJ$ttFG%INg;3r54zX%BtBkabm!jCm%op>F9;?k%~fUPdv=QM~^CBydrB9c20=D|A- zbqLJDnh*m_L^2EgaT4&92+=2pEs*rV>m9C--GKx+948{MOU#c$yIrrf<1~N$`7`9j z3vzI8m3Q~)z&HtZO`Sz#I1xzi>F>uZqd{lXuJAjBlv~n)CIO5^EZ}31EKW{NsNf~_ z^)F#$QlzMFWQ`$K^pA{)%gYChFi5D0UcD;&!CaR}KW-;GDk(322wF=&;w!Om<%k4B zq7~>L2MyHwGZPsKti)N>9O$;!-c$mUm8Ys?L%!J#xN*y# zWD50xMs+K<07=Jv2$8^dR?RiMnxS4u0#g^z zrC4(KwWP$^^Wp6x(L@sWM|*q!;NbNjRyC3vGBQxLFM1yp48@^IX@hAY&%Z-$H1HXM zojL{vVt6D>yg1CbcrpvScryI+LC#6-)H*XM`NNqtN8 zHxaB$mcII5bF$GA6%~Eq@9%=FaH%mRMq&c!;<7Z+D?YikgpXZkSIwkLSul^r)M z%Ovoq9Ns+v+`SB+fQmzVD^A_j^h7DJD#Vc$mMbNm?ePl|9ra^>XZ-WPB_q>^U8Awz z`@{($^`;=nat=saF5h9-|JscfVRT~~!KJzUhLI~nKm!t|XQ}ZixT?9A!dXk%H7PFx~)gL}_{Xn{qSwds)!Y5mT3h3Q{az>fdg z)~0H5&mZmsoKM1qOCg*ZYTo-*Y@b#{0FROdSXrgH*PQBJUv|xF1SSJNEdzbK0Ru8H zL+#@$q$*)BeBYgGv#*?L^Ma6{Mv$`v-U0X{qAOnklt07Mj?Suuo$VnK ztqI)$xNAR>Ita}W`&+HQnH@$NYV(MY!v%~vLYqT9S&es8K)_n+aUmmF1QFVaI0fQj zxH@k9$}`e0u;`JGbHNYZzI}^~3_@i@TmXLUFy2=H3&M5G@TSe?EnCoZ_e>Nmvrhi{ zBB?e)Kpx!Q<_Ab}Hcx5T4g@-6+=eWplBK;3u}fmiqNyLGqpOBCY0wb2i?A@lT$aH( zaF~H!2%$X?HdqLjnbY_OJ4T=FOf@ee!-Sv?;WHa=iK*KS$BVRM{`|t;>Xg4=02!)B zXaTE2;OQvGc@@{&tVcgzN*dKMxqR+gOi zXy0d`8vUj>`ynW4LqI0vvGVeA5z0D5K^VEX0?<2*TLZHK?VRFJ3$XeMPCq<8SIRw$!dhuPuU(D^CuX+Hlei4%NpZ#Nz^}2dR567Ls@q zWk?Nd>>hena7YLoC4HYfD0{`2NbeDK$GbEL>GzI|By$`}%(Nni+JhbvGlqKN!lw6KBUoe%N*bY@A%5@8#AYHgzGa=Wa$W0$(M4kg2j*3Fyrwh=fvvBLv1Ud;G!$D!3oeWbo!ti}eMO0C%~hI3N+EHe9f1 z1}Vp9{=KT@Y_~984Zj#s@@Br(Q1bP|&>=LjVPLj?m>T;3`;#DbqLPxNXB1QGteHg) z-3B8fLJjnev$9TNyvKAlQs2?nk;Bym2CNFd=#LQA2$9G&SUuv>;D?rNGXK4Dx)UKHLKq?5a3J&-jKlqh564erKD}wXvd95A4pfDg z#%f@!nOR%6+B*NY)mjLA6Kw|+8i4T&U>Z~bBHHcf#;C3d8)Oit_8Z(}0?I=NL)b+M zv)i-DSK!V@G;{Z9Ufv*Fy%#_RIu2ny!I38fvORnDU~r^Pke67TJ$KFr9l9n`@H-F^ z33NqvxbfU@AH~f=1GZTb3niNcP2ua;ui!U3fFqcWAAf?AjFvV_7i!~+w>PxF;($r@+g1JN~Pqr{w>`7IrdJKK?ffp|x$%(ey8JAqwp&dEdpL#dQ*@ Y39XK}tzu{JDm01MRcX<55zQz63$XlYBLDyZ literal 15334 zcmb8W1yojR8!d{hpoootU=e}>f^;b+A>Bv|D2Q~Iiim)S5&}v{Hz)|wp@f7Yjik~c zEnR0W-RInM#<=6$amOD2{@uv8zO~->dFM0deCG0$k-ENzl!}yugk+D{jVp2_B%8bO zXSbc(@$Wop8ZG?ac3p|FYbr49Y0n zrWC#0FLPAfNB30ikL(K_wH!_%svVTsI;zgarulv7zS?ac9@1JAO?Yx>3 zUl-J?t*te)wA5>Rr}K>R z{39wZqkuftEg{WUh>I)MFU<~x2-EgpFG*Wf4}J0*IXe&j@(5>MX@8>e1rb`^6KJ^^&0%ruAMtey1T=F zWE%GM_C`&@5G!!Uqsm&}%D36W#>RHPGp95~ zHItId=-`tl97i4}@b~uhg$O(Iugs74y)i8+ZEaN^x;!9t80&W>&}?IRu7>KMx8za`W{C zovu9V;E<3Jfzv0fILv-tBU`LXJ<1~1aF-ow!ZL3hCbQlC%bi8(=>Sb_(lY1PKaMkR3NTw zVQISdLc*VXs^ zx3kOdjhdO|L)6BFJKrz% zMDCPjWsnRmnHy{Uk!2jzvgT(;hGmOt&?vBbnUKJA?HOg{q|9R`9u&am`udk58>{kT zF8^)h2ssV!#qstmb1SPRTPD$fWX(c{_pTc*sVk?a|882WfaCmGlaB22FJEpDUzOJW z(NtPgbhE0eD%Jn`9SKRv7}@A+%jB1zS{Ul-xydD-=HpY?GKa|} zp1t>SpRCwKPqD9Pq&A9;KTyQs4-+dZD@xs?uhQ3YW!~h`qesLU`|{$%Z3BZ>32RuG z1B{G}ancb|+S=NleH*_s>+Uos9U^sq6cclrDD_q?*P9;X#}=2z((7C0xV9~1WzWY} z{)K_wqnuX5GJ=AFD%tl!zExhidewZqooju0jE#!teo8wn1x3lTqnyD4wyb1FSep{l zfC~O0Ayu8ZmPa`aBt83fv}GFZO)s3M>Ty{~HB!HSpEdfLkM6He?icQN2J`edWhz)J z9~}9+Cyy!0EzHbh=s);U3p??WcB>^k6d1lGX1vS-q96eA`X$va@lC`snLHeBoH!yIq>`QpZS= z6qA((xvSrt?k4Kkj-kAw!eaRQ2@Vd91g&CWtmOsc7RjuQsvQ(ULPERt>>0qe2ETqi zGgHIXn4vF`YJL6s^#l9%T~bmy+|tsLlb^4rrx)E`Y}zAy^3B;4Z;Y z#dM?F37!P%hM(c%<6B%_ZpboL7QKAA>dP1Hv6fU`e*T&1N;?0bpm=8WDU#mTT*kwV z@p~^_x)c)^m!b1{yQaek{XtUqYh74~Sd`ymclVdTYSh$7Q=)&nO8;hwAXa^x3|yM{ zeK~n~)$DsmzkU05<;sV6PKV~)Fe&|6#fnY&lp)AwE55}#}UDlR2{Tv#qM4wUpaOY+F zWjB9DX@iy&)wUl$e*OA&DP6O0xH=Q^XV5V<^(`(I!Cmb* z&cfntKRbB-ekbqXx3J_S9$sFRaT=?0%Ct$!>CaEFM9Ps3~W;9Ho0e4)dfg-P`3 znc3Np3wQT7Cn@$3@b&%O=p36w?>PYDQ^RX&YE;-f79eO@M~Ave&kj1L5`o)VRw6wHFD=3F_@w`nbDJgdvVs@QBe?G}%FP(5%Ny&rZ;X4!Eg%UngTqMIC zAK6@7TwJEq+mWzSJk}5Q zvH#eyn=&#lG>4{Hz5c6r1DxTPK|vm=sj1g|@63%hqX2i+*VmVol_i`bjW%)mfWJxl zRyoGa$*EWRXq%D#?Ck6&g}ywxc#~~)dDdeVvx7IA7w|#7k%m~w2w@Gb?oQxuccEi4 zeN)~m7U}Tt@SNP-ef#%+!W|3)3fw=)2cQF6qEFiVZhIITs~`I@Jvpg$2OH6MWG`81 zC=67UJCp7=)TpMSHl8=8qN3_W4Lsg;psC`;k>8Ew)TRZc<=#h@aOm%Tf4hlAIV}dy zy12Ob!rx!M*P`8Ov}u=!h)7mCqho&7nML~kPwr&=VG{OgSw@G{Ki=1`d37!+MnFJ- z8m&~^H1_UzeHAD`wMah4VqpcW=1lCz4a|{ zhVtl99bMh1mj%m9OTT{pESaqn@qPJH*0WFQ=1qN+jY7I+SdsI}%s`Nq#qYNBtE;O! z$;l1SqUo8Hset&3VYB{eTE*lKa&zqy$Jl(vJ3eOKuG*h{??=>pklXLy_YR*^Q%HP2 zEV|#6Uv658(7A zP0r5DC}ai{tW4x5z-@-=A{ft}eP-Kj?;$O+rqCCxtmS;jU9=Px_AVpin> zZ`JNDuqP-CpuBHnL=3wrhEoOn*i9!KiYx4R0J`_)-8*&*Y@wv&l}H(O-Ljp#_v~3( zTj&v!lswJIxWiraVSc{A%{ScT;Dew8zXk@}0|O87-0wWj%Nsn=m7o0T+Q*EHhQ!Xe zn{Rks*9A#%hss$SpUBt_I&?WKOnj{lWHGm~iNlJ6s(I(+@Y;;GU-dqGPNmQxYg9+- z!P?3~vc95H)5YSghax4bCjEpK4x*erchYH>~bUTcl!>yt~7=TQt zG@ZY_lcU@co8}fq9EcO^#o)aZ`}RG2`Eno5@#?D6y?ghFHSOvO!eX3QIr~c@Cm0y6Wj&Ark`4dJjBnq}Px8^UCl1_uH#PUOftsL9+euAbU0pAYi;S$S z&p|jiI62>EXUE}W7+D`V-R7(JZc#IQbG1hX6XE& zvix@rhuJi1KYQ#Y^Jxa%(i2;%HXEou#BV)XHr-bV5UJ_Q@1_68%RGU0ULxy@m-X68 z`#kMRy*vSuR+HUf*(M!H)r#(A>PLJTyG2%~+=@Q$+t_rKzMG@zuX><2Ffs9Y|Ni`5 zT0xnP^+n2FJluQzn#1d>v(mu!_a8ne%sm|%9Q1qhM*W8lnd~pp?k#GD9}|CT6H7kb z6A%=1T~2O)ymZ9i{CEfd&96cDfs2bUIB#cxy?afq9od zUcXM_{?K2wl$@2QluAY5eN~m`NMn3sv8(Iu-MbfuB3yTpk|up=WIhrX7k4Oo>X{us zcnUW0k&lm0MUjO>0nm!5(!|6>#dRJPf*CWjb8(e_`t%4(Wi)<_#XB^VrlFzX%aRi*=+)fbPZGu zOJ5txcfiolFl#N0-}+NePXxrAe7sbch0wwb2Z*7w$MJPHsZicafExDm=j+>)-$OXUKbZGjW7R5384W2i@7s=tI89IgG9)BX zsRhJ%`yMK7ef_Ioie^?;F=%K;9cYh0g@#1Nm8$n$+n)LOoM&g(E_=GqX?7g4RmILM;zm~ zdW$a*T;VTCRWsY>QxD=crE-o&&cBZSOgale{v?=j(z!`Z;5f?!;O_pqO z$OG_ts4a=y3Wmo;G=g?7K%3D|HWI$}&Ta%c@t2-c&t|uuxee?f2rnh4!L!rt0ER1k zUutUfhQ5V4p%-AqrmGkurbgl;jKYpx>Y16D!4{kl5s3hR&ERi9z1%`VLcUpp&h-K| zWn?IX9R4Jf+;LB^1FWD~$>rOa%ujSBr#_wV{3w@rd-=~uZG=b!^gtNctM1*qszv(< z(e(&)Z3YnU7JK$Sh!%m-I&TdemKc>WBpd1l_#Kzd5P=^ zMPB-rFRC@}-8&1~s0aG^j7~(e=hseI=DTMHXH4k2!n*KM|AA}IX{v(H>*d%@M**8e4Y9;$uU&9%Oiiu z?3Cas8hKnuC=4ntKr4W_OQx*I%N~RpfhfOt=GCu+8Kb6zQhdeI)aSh+yyhoAKiP8% z%AiMQSLDppuglmPGaDNQF!58@p9c)*ZcX*Hy>@N;`ue)$8}2>E#$y&_O1LaVtf97c z37(wKqJJlNO_MF}p-&*cpzr%=X{8(-_))XkI76W#u9`iOo`!8<0=A1_LT2XXIuo6_ zlHr0OK%_%?9L72y$hinH!)Z`^oS9kta3$e?Bn9Ja$tNqFgDn1YOx(S?uFeq0aB*ej zz<~po(Y=Se3k7U!Y*bWKWC|UuojsVsb#Z7;pFV9iSbLP5PIz|-3Tvs?o6YW*`w?;Z z*!hvIU7ekG2o|c8!lYjIcWrFJKLqGp7EgS<-{ru-|0O`2e&4=*_j-!Lz*6?11PlxY z<@r8)C-9H9qnrI+pHVmuuJvlL z_ji<(ylrr^S6juwPthvYOg|4A1%g8m5p&%Owl28RzHRx7@xp&_B5EY^Fb z&PF*!p z5Y%~?{t4O!p&UW1`OJGCYwA)Aq#JyFy$HHKIa#OWx)wWW#(YcBj_puvMz^7~riWj) zdi%;?$-^zrjtRVauUE;TT|$E1sWfT{|K#(JAF6u!fq{zd74o#>&|z=To;jVDtzgZO z{uRQuwub#*UP3l&Ll#&%Lnj8E?mnaqT)$Q1lq=3aD!Ll<#c^bxv&If|2b;-mAF$rO z3Lh4E4YuM{jspym34iRWqr3Pl2W5c6Sq|Zj6MTf@g=PU0Y)kZYUsic)T-FVjeG57R zbLeJ|&d%uw#>v?0f2@z;xHA`ijT$}`4o#0DbNBG@sL(wp=^i4%yMKXdz|FJznkjz^jz3aB2VI%kkJSB0V?IHpKZyr1#$ufaxgzgAfS|vMZTj(wC*EiXf zUkObKP^xTe3kKEx)!X|h@>g`_kq;VmL*b6kU%a3Ix%yI9$9U@07E4P@#Srv84vYR9 zBrWM$b+8RLu|vT^fDE+HzrEyk2U6^1>nRX1d=LcqZcEBh=jA{3Ota{`{vc$He9x$P z(wY`j?oRf2*|Ci*^G)}kr?-@@Yco!T#zoJ`c|cuVT~J6!aaRYvp}E3H8en$$ z@?|U?VOJQfbeI@y9Y_BW~cw)3dXup!gtSg;#!a@>>m;fcG@F3%jiHLdt4qPD>d^9cYPm<5{h!kv`yHOniK% z!<-Q=dl6n@r1jSA+X+`=A2oGNqI^93@&M*Y=G1)K$&7nHIHIDWs@GN}EDE#ER850H zl$Dk~1jz}7>j)w{H9cJlZ!GYRu>JjHrBq$wEWuq|TeegS-@22Fr4>IuQyWLH0llI5xbnxX(R@T>6U_y1~Sxdx^ z$prgh_w->@I?XjJ<3NYtlhE|s_Rq|WTsIydtE;L?Ocni1Urx@i#ew^NXF@xU5EuR1&LZc0BXu>k*A_U< z;^=_`aAvYve)adqNQ#Ncn$QW@r0kbLW0j9LUWVPmvPmD$z#$~0VL#Eyrw`2?sO3Bt zcmNyY`STOTvv%*=B}+v~$uvGb9*8|j8V9h5 zV-$eOWf58YxrP4iv!_p)=K1e9x&{pv)z2AY8R(aP+pikKUacmSr-{0gQ$dDCz726Z z1Ariw)8R9B78<2R6gOA16)lR6tz$<=#tq}}g)@Z^^)r<@6j7sj3b76auB+46(JX2( z$&gM}%Tnmrvu95Tm+@g7qZTG*z`P=#goFe!s3Exh(on=E0>Hr8AuyAx;Y|BrI~ofe zZBxzRZQL?ZxePSMtPaC4t#RpEc(eWe{V!g;kolcU{4#MnCZTZ;A8rDdnH92p8p`f9mF|)O;{PE)`56?%@c-M^g?`2nte!4AG zjc*fqVXazHQdagDz6C7)YiOw>BP0DoL;ik#o8K-kh)Jg%SNnKhBdo)z6O~#4F6V)v zjm?iqvn&&IKf%UM|1gZ$ zxf50u1xrWG7nEKfvXp9Q>YKpi9YIQ^i$RVl9~Mln76e(Xg?_)P zlP-2wtM7=W-KA(&G^r_H%VhC`ZM_JL zwm3Qc9p**@O&^FpjaLd3F9_sk-TGD{_tB2eXV0A@W`pMD=7d&-uSG#YaS_!G|NHy! zo=xl=91UuQIvv*NVXB(0Yt~S=BdzIluyW+acGcF@uvowG6`4{F25TUOaNuc=KYrxd zK~D4ihKrZ6e2|J2QGT}?S|!vaF@J$F`VL>#$N8#IKsyW(O}k&)T$V=|<0L~wjf|Ml zNfaD&Qct$CPRuph+|o%eH%>3CIHKhgX+w@4O<=ZrOM1w^!A8GmIhQX?8w`|I3syoFz4r7#w`kVDR9g8qH=`Mgj_VlXlSb;7>RgqSUbSC#+*UZEFZ+5W z?j*XyJ1_#U;-r_u>!4C48xC)ib@R`ueRvDAl@Jd=tc0}zrn6^vKX|xh$1A;l6qsrt zRiBW}ZxsXr7SUy3swtTiL)=1t%AfOIwaZOOIjfipnLC3^>fOKp4a)k#busHMcpsODPG+fH=KniSiNtG(pp zD41(ehgsoDUfyz7KlcH_UnlGB$_JWpg@4vB76VY<->E-I zevCgRX$VFR=9LZbx$v76Am>lLz5DvB{8v|J>mZw61PAXFeBIXy=M!_nJ3a$=Ov2kr zx=WG{xj7tM4?Ex;MkK`5UXv5IfJ08OcXSy(jJ=i9H3y(5G2#qdT1CINF6wr#pId}M z)!W}+295OzY*P~c5u`X_YhgZqfRZvn{8_k@Npw^c#%-S0q`3thp0Y!PU~Jf!t|bB+ zgsWOXp+h8WRgMiElLJArUcGbyUughVak3NQXQRdUa6P;(9T_3)tY)G^3?7VYFV5U1RA$lAAhnOjl#{dbQ6Yy9qdSx} zHEHGJBqPzgsrDY_=jS)lpoqhe3}RkU&(W7wXt+Mwqr%2yuC1fP61)=y4-&W;A)tbp zYL*Lk8?JC|@n(I0!L+;JO7X$Di7xdq-g!W!{1CT<#X5a%cY8qpB4lpD#KX2W6-i0S zMVM40&B;L(x&rQDZ@9N{${(zK9(nU>)>_QIQ`dfCgpI+<4Qc6kbllnyP7k!IL%B|i zj+2FzFvGn<3*$~NsMvQE4@_%r?h;`njjl14^J~rd={(=hUOoHX3H&0QM~G=+ z%rO1uPgz%&2G{RF^9a{OLvq0Pf7Duc#mjnztuZJ_9 zjDZ9nBeF4byY8PTbN!4{8zSN=jGobeAk0%z4!bFBi2d@tBCBr^pP|U}Y^Che`0g(s z(ih=Qq3@5d01nWD>zv$90LZKJHe@H(SDb5H^c%E+?v)fn|>$Zk6NdL7$o?SyePd(l zuQjLaV3p#4z?J0X<$Y%{P(9 zA8&8(qR;#5a-etjA)Eu*b>~M0{iaQu=nL7h7`vy6H79@m)W#Mo3IDbBqng&&7PLY` zLn#ru0XuGl|JsXnA&7rp#U4~wd4g;-`-P@pGDO4(ix`XeyW^uTL`B@`%b8@-1)G-V z$0c-iPvSW;_=B*nk%n}xtLJeC^b8DxiJ>zKi_?8D2w&h^iOdO+9GZOb_`7(bLIx2G z`TC|30|M2I+n%h&$BkIu&gK9*EMWu?PV>H{T*3!sZbMV82HG#d;Et${5ny0=f&oSY z0%&m7&WU|YXn+t8=C@`RS^IMU1G#<}8!aO_C$GDAw6|wq+N5bea0rHrejW!_Qgkoc zSO|WbI9u?i;W`hn3JD#Bk&?P_(@VOJCjHiqP zLqkMlpqa7(y;(W;&|S10WSm&#j{!b(2n=t}B4cEXxA2mDS{=j*)w2CMU>6{<9S#5XXG+_U+S<%5YqWRsrx=8t}XS0QLyG)1nzB ze6mS>lRd?CO^NbH&+9%u-PJ4d6)ycYvcpg?Rah_5bIMWYPhs$~AI)($tza;k=dY2G zDl{AYDkZ{Weg;zfAxgew1U;X*Zl?;l0Z z0tN;K7!v84no47ic$?CTs7p8CvEQp#*Ax^E!frUtz|a5zOZa3M8s7Rn4bFO8SXgte zFfs8AcI3jnHkr9}EMNsU#uXe3Z!0S+8>6n0H7`_DRP+xH>KYnW!mEXmb;gFd7u~uS zW;J3#)d#&P6w6V=NFNeZAKHDRs_SZ9U#d4C{J_D3Wq<@e;CNUpH@m#z1WOT#VR00v$9@h;;0gOuv+O`&ATiu0! z+x36hmrC~gkYtHA7&Fo{!GiV~E&Q;So`!`T1DlFLi{+2Vq)_Z)NiPrud0fQsFuYT7 z{=d|$7J^Q2(qdv_UIYYOfz~3@5nNn>aB-WnVd`Y{8MUN{VLdU6jl$RzK}{0yGLRpY zA}9NoCREhadb+xw;OP)z+zwqqaiwTu-4VuFj@5`nejwpj2wXhNnR@dlPo5CygXbrFcBQmis+abWM$&Dp&h7Htj!f;5~l)<3|V(FDT(T zj6NczicZF5)P!h<#&~H@wbK7eeOB%NH+FlE$vv&GQ$lvC_TdA#9fX#v04iSrv8Cvi ze6|xb_+A4jL7b>)1?GrqMcxgG|6dVNXIEEOB8>s+k>k9=jj=b#CMVQc*cj3@{TQ|x zU;szNATX0?NLA-4LI8Asxm-Bugt3X6_f$fH2%DWTon%nGu@tNls>gq?dkf za!9cjW3B0_DPlsxPj}$Zp>l|##j*6_JDoZ2jU17O1HsgW^LX}Fj!b;s;j=0wV04!; zC?>YsM49PeidvRcfdVYQoi%7$7^%R!Hrti2V2vBi|NBgz8R%_wn>i@Fq;!fs!8~^1F<)B?a+%Qyg12!UCBbsUORbeHp{AyWyxB!Y)(410vGffN#?@!;hMQOd1L7)< zJ4PC8mbo)THXh+AYpLKS2$k~R9M zCPEtRZ`zDwPyr2$b%6o3YwzAlC`%$^opehT&iX@mAHPON#bM%%o{-SMs8kOAc+u*N z1j;}PD;>n9HAoOsSO$nUU5R(VbcvmtyJcDMQt5Yp3@yUy5;<=C%VLM0Asm*64( za@2zpSQ{pwtY~Ux_O6`|L0v%v5s$%RMyQ+^=D|Bs`g%`30DcM*XKjU!Jm`E)sp?1U zti~}ww8QHPcnhHH)2FB}4xq-$cN`(Ik~kDS|7DnZLkMvL?j?>Y#<5fCSSZ~=M`Y76 z-_LQ~C~7alFecgWKFO(5rx>I{cfNh?e(KygA5@aw-MdxlriHOKPNnS6Fyr$H{=Y_D zn}dxWfYBlMsoZPf&SyV!n$%r%e5|+Jn`(fFR)q3d5^IK|dwaUKoS$)i+g^d9*>3^} z-LCWWGr+w>DDkkmFM2^mz^iS9_sc9F_&@jSC|C*JHPA6OPCnmp6|(jJGxbV#n3|cg zbu9<((cOE=nDFqJb}Kk*rE3bkV%4Zd_E@p+>#<|Uh|#8+XsR)q*~p0Jn>W;8!J)k7 zkFYABikOpwawMho^uZS1Q-bV~m&r#o&a(3Im(Wn>J5QfGcT+Kr`6cb&(5E2hhjT_z zU;VvT4rYlD`Rn`maIJ7*f`Fl(9?W4Qy)R_*BfWURTl;U&|)VOsT17YN~ZlXv_B9B*)L5l{CqRFD)oYLrwig*RhA?e@6BV5Z0I)d}Hbt z8d?kNi^?{IiAT7gu;uj-o6VjCK}U1AG3N}hF?!_(A6{AUBcS^T>n&}7l2Ik&>C^1y zy=8JDzk~ioVw)Un(Y)?-7vwUB`vv^HOG2{yXsN({BHS_PL?g~O*tkd;CYATP?rKXg z4hRiESks8nD|WzBQ|z1c*h8&!PY4P=8bFeAE7$MOAFJkh1mZy7z8FS0E5#nJ+jO+= zU$VRwBqi5&l9q^$5DAZ#mRE=e5pNF&Ocs2GvPd$oO-?WJ!rLD3hE-Hmf$pWbmP1ps zv+`f>Y-Ts@7Q~^ggj)i?AOrwPO4x=U} zBtPsi5voEa2gV;-5^97WF^F8sPWCPV%X-h69 zj%hOzTJEVuFJ24)D^-Dn?ACqi=_z~etvn7Yx_)Bz1M(7hWW=-|2&RWZA&joz;9%V& z-#xv(PYDW!qRkT-1xzE=y0&>P^wCNe&<#yYJoooMFg3jCTc%+h3QZF0Z*FE*Qd)W` zdabuwsEGG_-}sS0yU)?Tcrn-f1!;=Ou{V@6O4!%m-~ZaA1r`Dhb{y&+$pWe9G)ykc zrhZ;xy_NF-Z68Fxyt!FXk4egW4r(F;vMee(I#D)yJ8C+k<*GGv4UYD3Q{sV2U%Ge@ zP2Wkc|6XqkOk+OXoo6RFy$*$lm+%(%GBHo5scq51YV4er#6adG505gkBC->t74^np zU2z%z5g{F3eZS93b{fA@6@?HHEI9ys{+A9EjuUf!8>${y*<;A%BN=9?~mLawA3K zj+aHeCkDxE*W^>|STun~H)ruyHr4hJGuiJybz zyf>_)MHfgVtPfAQ#D2HE!UPt<3I7i580A&--zS1F&BYx06cJ5DppxJs#A|^mh>*-; zq?7?+jM$<#`0G)llSKJ5zr~6A-Can{!@~n1TMO$U4qw8g0JRJx1&}_2Iq^MSnl9}5 ze{T^giefm2M8zorc(6scF$D)B8WlKuLIGmq2FN&G2?CEahonSk#adYN-)jj9M-hl7 z*e_D#4ULT>_0c=P%?1Et%j7o&KZCu0M)f}O_9laasz1|T70Pez1$h;iKx>~PN038B zIi#wQ9j`!|I5?P6?Zcf*0GaooK4_LWMPmY2rVrNC)}BU+1&qoJlQlGE-A)yg80;WZw=JXTg z{yhc!j)#(rOvGt9aYg_C^^I4`wuH&!e}CbzU3KiLNaUN#`+w=G^x?%_60xgNSJFha GAN>#b1?Q*$ diff --git a/sbom/server/fips/dynamic/meta.json b/sbom/server/fips/dynamic/meta.json index 8887afc83..0019255e5 100644 --- a/sbom/server/fips/dynamic/meta.json +++ b/sbom/server/fips/dynamic/meta.json @@ -3,8 +3,8 @@ "build": { "variant": "fips", "derivation": "kms-server-fips-dynamic-openssl", - "output_path": "/nix/store/4khk99768xj54lmgycv5nyiwzp2cgc7j-cosmian-kms-server-dynamic-rebuild-1-5.15.0", - "timestamp": "2026-02-12T06:13:44Z", + "output_path": "/nix/store/sw1q49nbj2dp484qq8gji8aq59z3z20h-cosmian-kms-server-dynamic-rebuild-1-5.16.0", + "timestamp": "2026-02-15T13:35:04Z", "generator": { "tool": "sbomnix", "version": "1.7.3" diff --git a/sbom/server/fips/dynamic/vulns.csv b/sbom/server/fips/dynamic/vulns.csv index a2e265516..49d3c3fe6 100644 --- a/sbom/server/fips/dynamic/vulns.csv +++ b/sbom/server/fips/dynamic/vulns.csv @@ -1,20 +1,21 @@ "vuln_id","url","package","version_local","severity","grype","osv","vulnix","sum","sortcol" +"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.1.2","","0","1","0","1","2026A1770940800" +"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770854400" "RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770768000" "RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.1.2","","0","1","0","1","2026A1770768000" -"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.1.2","","0","1","0","1","2026A1770768000" "USN-7980-1","https://osv.dev/USN-7980-1","openssl","3.1.2","","0","1","0","1","2026A1770681600" "USN-6409-1","https://osv.dev/USN-6409-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-1","https://osv.dev/USN-6541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" @@ -27,7 +28,6 @@ "USN-7634-1","https://osv.dev/USN-7634-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-7760-1","https://osv.dev/USN-7760-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-8005-1","https://osv.dev/USN-8005-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770595200" "CGA-4r5h-8hvp-w6xm","https://osv.dev/CGA-4r5h-8hvp-w6xm","openssl","3.6.0","","0","1","0","1","2026A1770249600" "CGA-9vjv-2q8r-rw73","https://osv.dev/CGA-9vjv-2q8r-rw73","openssl","3.6.0","","0","1","0","1","2026A1770249600" "RLSA-2021:1024","https://osv.dev/RLSA-2021:1024","openssl","3.6.0","","0","1","0","1","2026A1770249600" diff --git a/sbom/server/fips/static/bom.cdx.json b/sbom/server/fips/static/bom.cdx.json index 2627efd96..efc7c9fda 100644 --- a/sbom/server/fips/static/bom.cdx.json +++ b/sbom/server/fips/static/bom.cdx.json @@ -2,9 +2,9 @@ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, - "serialNumber": "urn:uuid:3f36cae9-2bc7-4d5d-9028-42a143f9e3f7", + "serialNumber": "urn:uuid:0f38f511-2736-48ea-b216-934856b7c836", "metadata": { - "timestamp": "2026-02-12T07:13:05.364117+01:00", + "timestamp": "2026-02-15T14:27:49.089890+01:00", "properties": [ { "name": "sbom_type", @@ -20,19 +20,19 @@ ], "component": { "type": "library", - "bom-ref": "/nix/store/kmdyrbk80v0m53dsfwsh63kvh3brwrf5-cosmian-kms-server-rebuild-1-5.15.0.drv", + "bom-ref": "/nix/store/j53j7xim0qkxmz93gnrlm8zr9ah16cbf-cosmian-kms-server-rebuild-1-5.16.0.drv", "name": "cosmian-kms-server-rebuild-1", - "version": "5.15.0", - "purl": "pkg:nix/cosmian-kms-server-rebuild-1@5.15.0", - "cpe": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.15.0:*:*:*:*:*:*:*", + "version": "5.16.0", + "purl": "pkg:nix/cosmian-kms-server-rebuild-1@5.16.0", + "cpe": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.16.0:*:*:*:*:*:*:*", "properties": [ { "name": "nix:output_path", - "value": "/nix/store/566hm45mljdcnwg6zl3pwyz6fbj2717b-cosmian-kms-server-rebuild-1-5.15.0" + "value": "/nix/store/4xxw6f5v4zcvg609d6f5vzjycxw9ghwg-cosmian-kms-server-rebuild-1-5.16.0" }, { "name": "nix:drv_path", - "value": "/nix/store/kmdyrbk80v0m53dsfwsh63kvh3brwrf5-cosmian-kms-server-rebuild-1-5.15.0.drv" + "value": "/nix/store/j53j7xim0qkxmz93gnrlm8zr9ah16cbf-cosmian-kms-server-rebuild-1-5.16.0.drv" } ] } @@ -113,7 +113,7 @@ ], "dependencies": [ { - "ref": "/nix/store/kmdyrbk80v0m53dsfwsh63kvh3brwrf5-cosmian-kms-server-rebuild-1-5.15.0.drv", + "ref": "/nix/store/j53j7xim0qkxmz93gnrlm8zr9ah16cbf-cosmian-kms-server-rebuild-1-5.16.0.drv", "dependsOn": [ "/nix/store/gclfapdylmsmw25fg4rb8kji5gfqwdp2-openssl-3.6.0.drv" ] diff --git a/sbom/server/fips/static/bom.spdx.json b/sbom/server/fips/static/bom.spdx.json index 6cd8ded51..3f8997050 100644 --- a/sbom/server/fips/static/bom.spdx.json +++ b/sbom/server/fips/static/bom.spdx.json @@ -2,10 +2,10 @@ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", - "name": "SPDXRef-nix-store-kmdyrbk80v0m53dsfwsh63kvh3brwrf5-cosmian-kms-server-rebuild-1-5.15.0.drv", - "documentNamespace": "sbomnix://c107e0f9-7be0-4357-9669-bb6442111394", + "name": "SPDXRef-nix-store-j53j7xim0qkxmz93gnrlm8zr9ah16cbf-cosmian-kms-server-rebuild-1-5.16.0.drv", + "documentNamespace": "sbomnix://47115c10-f50d-4479-981c-e1159eaa997b", "creationInfo": { - "created": "2026-02-12T07:13:06.115063+01:00", + "created": "2026-02-15T14:27:49.892014+01:00", "creators": [ "Tool: sbomnix-1.7.3" ] @@ -14,8 +14,8 @@ "packages": [ { "name": "cosmian-kms-server-rebuild-1", - "SPDXID": "SPDXRef-nix-store-kmdyrbk80v0m53dsfwsh63kvh3brwrf5-cosmian-kms-server-rebuild-1-5.15.0.drv", - "versionInfo": "5.15.0", + "SPDXID": "SPDXRef-nix-store-j53j7xim0qkxmz93gnrlm8zr9ah16cbf-cosmian-kms-server-rebuild-1-5.16.0.drv", + "versionInfo": "5.16.0", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", @@ -24,12 +24,12 @@ { "referenceCategory": "SECURITY", "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.15.0:*:*:*:*:*:*:*" + "referenceLocator": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.16.0:*:*:*:*:*:*:*" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:nix/cosmian-kms-server-rebuild-1@5.15.0" + "referenceLocator": "pkg:nix/cosmian-kms-server-rebuild-1@5.16.0" } ] }, @@ -120,7 +120,7 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-nix-store-kmdyrbk80v0m53dsfwsh63kvh3brwrf5-cosmian-kms-server-rebuild-1-5.15.0.drv", + "spdxElementId": "SPDXRef-nix-store-j53j7xim0qkxmz93gnrlm8zr9ah16cbf-cosmian-kms-server-rebuild-1-5.16.0.drv", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-nix-store-gclfapdylmsmw25fg4rb8kji5gfqwdp2-openssl-3.6.0.drv" }, diff --git a/sbom/server/fips/static/graph.png b/sbom/server/fips/static/graph.png index 563e02c677fb27c77fd46d28e181812856b005fb..fcfa8eb3fbe312093ea8c3b08cfd7160f075e428 100644 GIT binary patch literal 10125 zcmZvCcRbeX|G!EJB@sfR?3<9xtV6c!m6hy~y&|hL?7eqZ_RQYdTUIvNBYVVc{$B6T z_ut<+9w#U6`@Y`S^?E(m>+)5QlempThJ%5Daa&4KR0#v)st4P_t?i(68^ZM zFC!s}af$ro_IIbn0!RXbqq@_1L>_W_sIT}r*glAH0(-^DU$^7gsY zQ)Ojj>H;c>u9?s}0 zKzZj*aQoD#`}B6~R;)|EqweVG@6b*|c1&S>ZTX+rNaDJ_}>5hAi@Vz z@qfP{tdOd%Mqy-PVt=@w;mCyiHpWPi?HnAW8+Aub;AM)SPq!P!ON?-_@E-hW3nZVwlQ@pfR!qC$*P6k)@>^^%o~^`2_^TL>O**?Xd2j9KOY)c;51E*1dhY=3Ol3TjE)_ zec4!@nH=UM0oS$!Ui+P+qfGbHf6T9nFv!WtExl>ax&_>h@jX2~f9GpSbVoheJvw6D za>;h_VhHbyd1itq6UF?qw>Qvbe_2moU#X7!WgPY%w_WvZ^$-^^67rJ<#LYSQ;0h=Q+eeI$4H-@o6^>VX6; zd3nrJ)6>{^c*d=MM3vRmQ7rmM?IhZv_l%~drm}QuxZvc|;iD(;vb7ThT%&$|!ZI*5 zm3;H&Ps0U4je;#yTokKr-+ZfoEWZmolUm-dMemmb*!oshEPZ`_4}?4tW<4(x3v_Ct zbcUf8oA{_XIf>NO)!EtEeSCdWtfs4xcW!BKA1ZsR{@iJ!W4Sl}DI41_CrK}bbl9f3 z&CT8xU&7t}eWo0j0qpsW@gMNL!O_;V{_8JL+X`9j!IVQa@2tr5kUs`EENUvqs71 zNG5f^MFpr=hOpw|r&q3A(XO)lQdoZ?JvkRq6-q4;78xn_=FK-ryf4xwJAZ!mB=Cka zDu1`xnyM0+BEJJ;;JpL}^HF`05xBsPY_jG)4LmX3x-bknH}dw!K{HP)rv9Pd$D1{1~;-$UrlaRCn zFdVO@1$POsAw@oItgr8toz19TpgrKkKG7j@0664RUQ8xefe>vKlvJh zV0*zYk%g{|KiMo0*2&t-@l`UgoK36X%fL% z>V*$CCo5QYi3YvzP!c?RC?_qA15euA)s-`L^q{}9^ASIPLS-e7`R_d6x;lX;nxzbi z{6;B&Xc&fuhFKQMq{0!=VtE^!xut6dYeSfrn5LXxhlf>Y2(W{Kg6@-(het%Dk2qs) zzSmlLabe$3+3tRE#!KM)8R>2d3vI)U%UUI6Wm0ad2afB*KYetb^~0q9I}}K%;^5{*{Gb zp|-(6rQPefx1T?Me$Q5Y6i1dW+;>~_i7S*aeE2miJkw!8I=UMGizf$b&Er2zTuu%c zPmi|S`}%@XUU=^*~T`Wn~RKm6Vc7fl7LrESQM! z6(Qk^3aja3C?0y(e;^R6t$1Ynrsq(Y)gx%AbOE7|D64}-}B;AaPS@ZWWl8~ z^uDIAa2C(ZZ*<7z6zi7l+mW0v@G}n&kFT{22;e*OpWS+%vb_c=`Q0Zo{8?L+9z z(7>35Q}Zr6f3AGGal5Il?FPX4!NH6hhv(slIs!y+TEH~^{8px>4ED=CdVLAJuuh5( zq|c1sSX&4C`{UBfC#3_?kO>99Ydt?bddkk8YCe)PfhWfB5z20Eb+rRZh+~GHiz^BM ze|J>Za{x%Kb>ZUTq9>6r8qTH|2r}?w@9@wFiUku3i)orj@^NU9Uh|E>laAir*6Hd0 z?F$i+SmJX>jMd-yIy6Mh z!Ex`|vu8ll>N)lA|7~=pONGyv^8>I8kdl%DGo!*@e5iK(TVmKr0D${_z}EA44$FMB zAphPa&~rQddJLB(*~gC`-TsZ6w0ep}PW{`Q)Tp$1#KOV?tfOyf8CXy-fwFGmOMT&u z$E;JW!pMthTf)wNOC7f+$Hv|m8~^(qtQ9if5*{1d z36xw^Uf%ZWmx9qLVDj2G$jE!xqoCN(a8yb|NDd0D+)QGBV8;40*SKmTmxwm zcM!4(AbnP8Gv`&_Owc9O9z;PZ=vLXa07?aeY?hXVjV%PE2BI$_Ef4>Wnsh}lk{$l= zy!80fOXODzDyF!sjFy%*qe*8oH-y>;l*}-lZ+f>Ny*yh%)TRb*@Fn~8Ql{4kw z;cq)X^QNMq`5euvi(3A-7)b9agr+Z&&QR)0p9v60Ebu(g&eHR)U8i;;MPp3IJI4~V8py1--^3&B@ zf8BpH;~HF4#I`k4CjeZ{2?x$QBoaVy{Cu|J<26sr= zKLciE^B2x9k1(FElhV8mM)# ze}A~1vFr63eX2Y?LWDMmX3@z}DC1(9x~XqyNJC6a?6%*_O+!x)TIh0T`rWLal~o^f z@NjvJ<6mN5U*DHW{G>86G8wvGfZyEqI_Zy(k3$j?dH|SW1zfq{4L*PUilR6LIVMR% z;IujMB|4f!N=iypT$~+>-ncKJ6B_S65D2&R3=QnGp!*4fyT=n!?vNEsO$mza;B^bHKU z&(I_*hiaKTr^!6FULap~HY;ZBj<$5>7Z!GRb{hNo=syMW#TV!bv>7PUXI4`PW~(M$ zZcW#OO42MYFQWuJ&W>$?M(cJ96p(K4I3JGEcGikw z(dmMU>klO7mXwriY;X4l)MFCI=+YDsxw^AFRZ&u+4-CTZaTfFE&l~upST?<@yu7?( z|EO81frj%+K%`;4c=6()z5qY0VUuK=VyO;;ePenwY7;dCIVm43~Qh> z_-tPvAF3x$0zZ7fc<#8~0w}JcuTf=33ry1r^0l$?Kd^}XKtM$$B}z0(cHlnR;r*#4 zfMMa4mTtp5GG4^=j|u@RtxT7nXA zJ3kzC*cb~1oH85k2d6YJG?WHqgqmE8PGHhx%);UHiiwE$93M{(+egRDeCyh^Ykztd z`#@aU?=4D!6(iat<1`n2^(tomx+m~1VjRi20^ki53ttPIou5|$Yba%_JeB6~yl{I! zK~d$fMgWFFOjnl@{(&8A2M6FA5MX$Daqf4QiJqRG%W|Tn&h==l!a7-B<-7H4Juu2s zvq74J!$Z}R&cDF%qN1WUe;Ti}nkKxYGdMfmbwe*jJ8aJ+iU*QqA3*bg=`7M$DFs(! zF;?^u*mb{?KKb4$r<}YzJqqQ=Yro89J1^S0K*8t4e7KLr@xBf>ZS4a3Cg1@tfwHo4 zQ*$#>8lSEQn)dha-vJK=;-Cw1YLh_J&~k97JXLIf^Ke-G^%3zr4W6EG9^Vgsa@Z|O zI&F;og!8p^bbPXJK*FJ)vQ{707N)DBat{=wT7o(#{}g~mXJ==d`4(*0xX++!fIby8 z&vP;}z2ScVpBA8-ueas;US1qEAnq2h`7Rk*4nsvqOw6kdqGqF35H?IqObE6(Z*+#! z-y-Ai0nbGMzcjEkGao{dbsGmqe|Nq$fKupnvE@&%>v^y1;^4ReY-aCG1fLCR2>UCP z*6}RC_M?PKXQKQ`Sc$9sG?PBaWGE3o(L{W+1n6S)#*hB{&mC4Lag_5lei#?qugIz8 zz53|w?LEH>^vATE0F9t-_Nd*Lke3Ap|%vKVIv ze@^5s4^M>NUm2=)d<)fJYh%;+^XErEQ`_BnvG4N9eVNG~IE@jE%BHjR0-*QcSSg(C z<-l^pfF3F~9e6C(@bl+S>3-oMCnI4fA`t88N{n-Ja}HZm8b+wE&jHb)5edo2qzw(z z^~ro-Q-K-bWWxX-vd{IR)Ya6~KDLK9aQ`SN@k8fzseh5i=eC-XG&ZJNXb)DW@!nY` zI|m6$)KI!#-W?wp9}}|!ME3(e+vEID-ObGnR2(fgcQovpzP0t8|G-pe6ulAt7|oxU zm>5~^4n`>f5b?^j8w@%nKT1m%dt#pf$dm9mu&S4ts}i$lXG!AC^%lP8=H~YD^5U^u z^cf^qv1;+TD;?ca-F{ZV|Z*I*Voq{K#erM zlG#7wbg#qp(-=DEwix?QO^tYFW=1;tB97a-56mex4$fmbI&mY;95}H-5~CT{T&Jz6 zSe+WDr|-73U%q_#fji9`s$N=`z{uS~_QK=(<|$N21Va>THDjVWrRUjG*g7B+yORU6 zYNt(Umr2Nq02|$QTS@#D@n^KH)8&6hUkoY<5X9N3D6lV=#Ez&*99)hk;Ez_1V5ib zH@xOshao$d@m~W2kDzOzjqO)|J$ha1yi5F8<#2U?+T-&49Z0|rH8nMZqvsei=3dr`uEMn^8rd?;;#_+fSrBB##Yo}&@r0~U9T8N&D=0t54r^o+)q0|ElvD( z$&Vi+R#1kVIy-yiDp{C{fr8Lme7)gmZGgQm~e0FWUeA&pSZoxQzFVD>Tm zF88~2>vTQ5h$~h%fB?~JnaLrYhGKmgsNQ|n&cBJ#-%q=(Cl7%s_y7F7mLUk5|5{^} z{fY`fT9emo9E>PhsBt}TKBhacUWYD zvO5hYp`>g;^?bcW>IK>q01t(&tJpqFLoBPi?WNDMH7ld@61sJ4Z0uKo4qv3@m%zqb z_t`#tmyIuR**Ati+5nDuZRbA^&in82l+$@Oq!QB-aT7cGtNSU_G!(H;%qzX)ckGuK zl3EgDloDEUxpoEpI0B4G8fePCxM0!m>GC^MJCbs|VS-Yj;60^qC15E#XI z&@T&d@AZ?iZ zM84TW*~*y&vS_wv&!{0+LH0G4DlR_W{`8+^*>?ZD8w&_iWRt;gNLM{T-^N_rp7TqE zU53RaJa@#&R>^T-B>n?n3-Rt(@Y9SFt?li(rQz~ZAR+`XJkNHqEGJ4+z&t`o_|$3R z72=S9a3O~UjawhNQVtNWq@)DOgA#Vquf0&aswwJ;R@eEl(8V!zZ#=gNffQBSWYEw<;OBUE0m+~t%#_Sf zf<)K(^86@rBC@?$CMUfZ{FaPSy5KgBBrkf^7D{OF0Xcfr&@3iCo@r(qEx{Zf9xgNO zX`7LeQ4E*~Bw4Wc@pAU^g5-EsQeUH_sHkyxI3k|g8j{frhge2x>Q6QAwv|ABwU&B& zm6{G*wYRsIOBR%Maw;Drc`GW4iSY^R4$J;A6Sa$yskwO=C?o3^l}i`5w_zxulp#%oNFS%tt)01Mi2RF0uTdXu z&zj8EyF0tM3{+U_p8VVFZu)`?>9`mqAeNI{kl1iosS|*H%7A__m$+E;KiX3(WRL{4 zeiIj$nuSF!V>s}vq?&)0p$A44V?RvpfS{9JiF-*$&CU+uZ0K?LNJYL#zW%?xy;Kl< zXJ`BU(nr_bz+yf#?olutcbV*@cW#asLp5BSFu^>*5ABAWJk*ow^C0NMvbUowLy94( z9juDWLf_riPABz^j9N>Kx+@{Ihz;ymRGk>r8al75t7NRxE~6h*%72ZezoLc0it>jXu4Rxay=*nv|FBuTy3 zHZ+7-*x!Y^g_T&fwU>LEPqkxUazV`cI?s-&5WaJBcPA2}+M585CGbsGSuy};iIfc_ z3F;cW)u5n&4UhM_StG-Kdj;_USV1ZpDXjtWDuDCt?_a56{_HxWn&TZSF0nB&h{OfK zP-(w{m#dba6VmypwyKube3$_uMKn0Ii1K_eOAwGg(`&+vq&xwetyV3t0G&y+66KbZ z3m^w+j&_ZctdW(eogI5Py*$fqsxKTHq8>5^EC7wg)|k*H!QVHf_5c3PKig@(gG$R* zR8;)@<%?p2hkHh34_G*`c^T%6JI3|z_LqCdYh9i}iKz1@g@vWYP{viv=nJ1Clnf&g z1PL$MgQINK7;^5DJML1dk$M{*NzCw^b*` z0rX(_0NZmD8yi$%^0#kPVwOL_F#dorEG#VS_;?}sBR8$xBIPYRP?dhJ8Cw%&{@@hF zgC2D5Ep-!BoZ;NONyW=cYGPu7oP%{^zE%Zlxi??CN@>@q8fvCMx1sMdHen2}J>9^- z0ASuTn?L`7{6O$XU&9qZ4Z>5iq3^{&@@2&qv-LVp32ZjTo|cr99IxjV4%bKR4N$u< z!~SN%z=4OC*A}cY8J9%|tdfXxpZ(c0ne(&hsVNSRI^5K?3qUDaHa2|37Ut#I*w}mn z8_?3y5)u~H1cQZpQZ5$_n?TPtj*d&8?g%RIdO*OkdvIWg-dlqA&Q9!Be%; zNXy9?i9Adnmdouz@I;JV#vIl&2~V`j8E7AaHqnC}2d9t(=zPUm?L8jELEt~dvgu$e z%2w(DeFkm8vde=>CgruGfrutgp_U%KrnUo^dJh??PM);W2P=1vS-_iGxTHn z4-IbUFd`;3jLUfX`}p|(0r0?UZ$02C>KL8u=o6Fv^6KS~}X=pS&Mh4+*Yd^JpQR223jecn14}hK^7r81f1_1x>Tpd`GCr zW=@1fr&<*9BOZrU{GIQ^-sS4-Z~aqJ9>L?n5brjKC!8ZO?HF2_C+bFjYTp;MXnA@0!Qau~sVQv;X+DRB-h~5K zjvLig5CV=q`!{KgED|&hNDC2&BjKDEAmu8ssTjZZD|9J-u?VVPJm7wcQ|kWY-h3-= zhR8VJpE7eYYnIN8$T(UEGg-(}4ooh%s6RmXpj<*gFf*Pjo}ZmXc;s`K4@-tpEhW1C z%F}oz<`r?2@ph`R__1(LH#`D1AsvQwm%;-L zUSJSx!Jxx*R0YRqB{C^V4(0_A!9j-l+2j1=E(Jv|WI7+X{i7GL^aGJ8(Xb7o_jnE-i}vN)~kYgNlVI5?SN{ z1FM{zoEx|WO|5h#P53+5|Dwi*wMl$R%0h++olH3j=&_WNn7?a7nH+C_2S9l9!)a3! z3CY0BhJGm_Bp?9g4jzdfve0A%A`YL((k4&|d+L>CHa0roYVffnmt>-dY zjl;#6W2b=1xy3+KZi-n%d4Z6ucY{g}SHbgZmp*EnWT zEzqBk?Z5V+yMIQoAdHwt`K33qX zW`AO+fN=_f9FVznod?0K2+R~VIO{Zo^y=nY#1sUg%l4h4P`%tM6!wd?d z?O2#c8tCbz6!@B_Y}A5QlmUo@A%|vu6Dx9)gyoq@-y%e)G=hQ;A%sV!_7L>|^cX-{ z`0*KHix}-g3;+=)DZ8Q1p!?*$;**HP(TTFRRlpN~{;47SO2|RqLy`g{R)j!xCKhsw zsR9Q`#o+G8hn*c8OK<9%tx<`Iy(Y=-;xMv9!|VmeQp?oK)Yw>DK>;6`e2$J*y!?br z>}Lc*Lqn0#rgg(PF^p4SQOl5Ge1XYfQc{w3gNM%K+)b}GI2rJ{)G#E3OgSJh5Z6+7 zv4kB4;T|Vz^q?;;XjTPy^g8qYB4!EGKxU8mpzI?fU?Z&M? zU`{9Sr11R?0D3_Ob;Gm_l6jMlxXOEjSz8|<@dsaFF;h$W?%ffNXZItdKQ_Vl8^OgM zHyF`?7T<;OTuNG6+GbH#Ao$~yloS|c%`Gmr0J4@*gi+mFMUV$#L?54^H z3r#8o1qI0E5nK|MHz1OsC|YVop&UIydGsOt2f|qB{D2SyW-4^r1YYjcNS;PGsIU5y zbtXFbq#kevkUvl0$>85ZG8C}AkiMm7X4=Dz2jD@@nTA)9GEn!@;NbzrUdFP2fu-yN z_U(Zz)5l^#3PBEnftZ;4aBboRtPJ$`JY00y7OiWZhipg>7#SieBtbyJdqMZ-K;$D% zrcDiFP+y4BMec$Oq>3R~Dm(}>S|iR)7U`b4w+tWA6VDwCBX0!=WT24Dz$o4(=W1ze z{6?dLT=XDPfmks3p}=D}%8m|6AobO$s%J1`2kMZToHNsb2^(-P($B}o&YGpB!jPLH zH<_T{QdJTZ3X=F;L_j?QhCYTn6BwYWApetu;*c3MnsdbGv;}+nZ+o^MQt&D_G&{VS zT0o$VHPRm literal 9778 zcmXY11y~eq*Tw=t1Vj;OM5G&~5eey%ZbVwT8x%=Vkk~~@K}xzi6v+kY?(UM1hX3sQ z{m7*&?9M#%%sF?R2~}2GjF~&4xNT=loMHX8A7-bs$29dM;_5MK@b8VZ*bNlN0CFz8m`b`YyqHl9hg!&;I`XYhq@$ zJJ)>6CHT?6YrBSX9#-A*H1S|O3rlsyH<~FrT-@A$_x6l0FU}JLTt1wgoylU$!UD3Y zs-0IG+ae!1I5~ayIsLbWmnnI?UeGX7?;{wDM={s(iEIr|>L}K-=i3z|68Vur5a}@A z(pzZs+i^JkWs-I$KR>^_msiQ_W}GKapOWxcKNuPs`Vtq{SL@+4<++~ch(!w*Js{-a z;UVO{^A@g$@Xj4kWn}`lt%+Y#Q%OY38a>r6RxZI=8kz+Lrc0e)$pu|M;!y~2cpurH z9BwPMhEw$R_kTC2^IXGwnblleQX-?EusGKo77!SChm=(IyW}UWT6a!LO3KAmb$Lc7 zf7lLRv#tagGc!6vp93OWTU(lk_pXZ`#d;j95lMxU&(>_$&u>lEc%L5(d++_>MYwvc zEBxJGRbA>%jwmQ#r=z1|F{pju_c0&5}-{#+g1J-qyAD;dU zkQ8W!Hn?Ch_B zAF5D$jCt;>*mJcWdpm#s8f{P2z19mvA23xag3`#!N^WoI55Mmj-`Lm~98g8rb3f#n z&q+_AkvJaJGx_(Jw+ASqsIxYHzPsjqvYL5xa>8Ybii!GwJj<$^_Pb16?1(Kf`$HN@ zjswk+-ZwnlIz64tteL;F7;Bg|2nu^|teb>+$x8vc7zd{7XtwOLVk&reY!oFR%Ie$$>gy7J6}lH!v~hW@kmMtyv~(+%(6?4U$Hx*5nBB+a?&SU|C-ctE&Ygn;bvHhL<%h%h`o9|+{h>E!*4DCfLw0pL zzkdCCbacdF-bMbuD>ThWN%_^6F30b4@&wBDr5hhnxyPOvRBUTw;H^Q557cT}&=d|1 z4o0($fwi6ovX&(2*s00MRB>@}l~q;hmTzI7#5PUeyg|Laa_wl_?=ojgnQ3D=+0Sfa zr08r}e4T^etITqPz+`1*rI^5%;+!nz|A30B8~VuO^87GIhyx9B zuG}0P-(G~>*Q;`TF_{uG4i&K4mwwA-ZQ#F^|CsW-^ife&ZSU&R7|HxhJyqvL{1(Zo ztKnmUzVf``)EBo#-8$kKSXmXk>2b-%9Hw zKatk;8WT7`$DLnVH6tdHC}3@?A^+md{B^;jyvAJUl!r>+8``QK>`j*AKGu*Hc!? z42N8kg}s8{w@}z(hK3CTh>KftN=oLt3++!V`>y-=_;e-kt1cbIvgv=QudnaBWMN@J zscCA@{pfV%wVen_NqLx`pU z-}zR6D7gBdnwlDvOImt5r~S-xv+krn=ck9EfFgF&^=C)(5vCu~xnv5gOt+N+DJ4?o z0FV?N9l5A{k5a~bNzgU|Qyq)ljbN{Ev^W;$mWGOogg6|Fu>- z%SHcGM@J_hAmEj?b>~8RG_%?;VBuFD8=bONRg%q%o!|IRY$vqxlPab>!{A7qRzoaT zuU}Sy~2Gqg=npmA~5Q&SE)%3XgCe(Jax(JB5YJuPs8vn1Kps3B)?i&T|GBH|GU_*cWN zpU|}XtK${yU0q#kc;W=viPiZ&P$C~ceafkuoXdKYw6I_TTgJi7Ev~DpYda0NgTXXV za+1-})nx|zg!_QwEu5DdK#onX^4nHn08?L`ms?9XMNXkGJw4X*#muG~*RSvFF3JVr zQ{@+S_w;-w;Wo=s>;Cl~>)o&$4o?5TKobCGX=y2`TSbB7KkB8$MTfH^hp4D1v?7v} zl-%E*HhiecuBQm49Zn(m+S2leJ(;Kg!xMh~uf*&IJ!Mv!&>1~Y$Af4((LOFRZcY9E z{dbCZu=~Fa5@4loP^&-JIj{fv^{dwXuNY5xroGUMbw+`=PdPawM@F>z`ujPbJTd9{ zChA!6`9s(us3swg-GIX>FMKkxc*lrfkKKjPMkfgy8yi5*yq)z}rcLkI43^gAr6tFW z5l$d_IDM+saQ>J0_zvGdM!{sex`X>bDid{HvHt#7L8F1ziAJES1rHAoGYos z2I&(E>O&)C5*ui`IM7B6wfV)Ax;iYViE5WHkNX=xb{6ch!YiHy7hAf~ZeneBYCZ<()G)d&s4 z$;H)(LS^evk}F5Lvg=o0|MrB_1{UP9KD4;I*nuG3j+c;=3xh4iD6r!%(5=9uqN36% zw{AcBI}ajK^~4~Tk?`)_&<`JIxVfW&WI)M;M@B|k`}KyB!xBNaMJ6Q30}+$(*;4}n zY3jHEUIIVU2nv#ki;DxqSoEd_T3-UTn9je`Ewy+T7Iy2-ojZEf&e+hfEUc_Vo@*FD z0LOdXBJFK$-(bIp*fdE%qlIK-WS~MPf2d|+tPK3P3v~O4hQ@zlLT{|xrsJFFd$pt< zW*!LtrO#=flcJ;?W0|ROo$IDdpr(1#oZd;uoe-X$UKmuR` z`Q&GbX!ty5l9!X4|BWxw1osNw&&9>{h1ZS}&I~QwR_3!c!CzZjJ5pkfzqPfMmX=09 zLedWX^;OV~&B(||K1t|nJg*%gDJg2^*ZakKmarkG`Ig(G<*=bUewT-SS~@y}6cm5H zOGS)SyD-C1H>T=pMg&~9r~U+B-<6h^UjP}vCm?`|irq!Ew;OGal{GattDmg1cN}X# zu_X(6L_y>K-K>~)JlxVJBqX$VacS=BQ$Y?8`PjgzTYmj|S6RttJ6-=NA_9N7z>uDW z1(%(j-FB+>2SGnb*_*hyxy9vjsi-2;&=+ff`acH;5ou|(aHuar9$WzIn(pUbhg;3S z7*MrUn;<2B!fT)jhEEkcWrk6Sf^K~!=1M%)BhNiO1wgGBuk@tI#_DCUF>B<`oNhNP z!^YA+emuLn3LFudi}fv|oLOH|5`?xJD0YO4xobf_#$VY3kx}*b&lsFM9`YVX}JsG6`t=*(+aIXBIM2i>!N-1 z=>6Nb7$^Iy?_*XP^!6x4F(U9PpyUuja%`AgoJM1yh#lo zE3+DY4PHVnElnd&=LHCuo40Pww@1@UNJ{pBN(|g)SMN}lc>Wy2X{qxUKvYwc#Hb08 zIxQVtYF^$Sw`reX5ZiE(6O|6{3+hikfRJ;7ZbPh9c^$F=?xUgID0v_0q@atFEqOql zk(M^Iupj}b2_W)9N(#$exY7xP8`w4+e0+TEDp&>>A11-s!|mx-fHO|x7JE2g+*7L{ zurIuJQ?#6%FNfqxEqZCJt*tAaR|&;~a7A@>$&{3ophen3@6v~S{I~$sS4_z)C@5HN zJBh0EI^?sTd7G3~7U@GJ>xw*OdT_U39v*W$50xsFsP%@LuXD3$> zU2ZaJ!p|N*z5#F0DYX!FcdyKiT?}Kd|K@jjA^(Nr9bg(`LO0yVJA{NZWLeYTqN-ii zTc9T%fWrj-jy`?m=;~?){oR=)OeQ7ODr;9$NqI{>Lj5T+6~6d9_p>&t0N3Sc)bwXZVUhPTPZy@Iq!eQKkD=#k(_ACXK@pFCqt7!+4(__~J z$)?Yg!;6+NPqTFLxh$-#j9K=;*@YBHRiw6BAl!&7bQ| z=78xXCEP_tMY4Whh>-E|y4GHOhh|{5NetBovtMG*fgW!Ibb@LrULY`-{%%-maYsf* z24@k+d>#`M6YccSYRb^}_y*J^2qy*xh8fs5Ep6>9$`!Wy_t_2fHdvLsyu7M>sJwTs z&?_aG9PP|HR&014tTn@RK@7lJzHX2WSO@Ay0!iMuZg>D1>pCVT;r;t`hnNU390?Pw zdteVrz(4^fnc7_di?!=(Da7-b&NYSNxHLC4ak#9h)z;Mk8NDhh(pWgi@vILE(;l3M zMnc<42o@YGX3+Ej<{gj``dZRRBP%B-XM)&t);tH~Wwfx@zrt6)uHxe2z8$U$W@Kb^ zG$ce!mNWS^%!QvX#oM8XIzZMf=I4L{#{k^~%9Gz|3D@UjKPB5{x<2vj%=_8t2Di53 z%>ug$Tnd302x8h1ng;^x3Ni-_a`G-NF3?qYAmhOtgDOLERcObdEHpiH4M{F zhGHTLk^#sy7IO;fQ+>}*ihba6V%DE$sb=E!XDZRt(gysA=jFB@;h=ox9n#Ps0(TF3 zR5X7J6xz)4axj1n=w`>$I361&IlS2emQ%MWkKllS>!and?1rf+DWX8{5EB(!IRUu1 zdwL?P^c*gLuNoU07s?sQ%2kh~{46XO!o$PC@CCko`&MQAv+uG(0^duxsh758pfSRK z{`{#z|NW^&&)eEsq4d+VZ3T7uTD4eG1hs5yD}!7)+7gb=A^RM+>kgB|_*Z!>zk*Y{ z1J<&Y%1^$+cCxUzxUsVnS5B_uwckr(O0O%Ir!%b8`X_<8sH=t0gY%#z=s_z0&ru3{ zN{EVH0kpdI`Me=3HRn){y{DK>pvGxg(f4GPo|aJNhjAR!?n#GJ{Vml4_f_K>^yO?# zH?V8A0`*~peEOs={ZUqD!*#6G5-fQUlpn}ntXf4nI;AANMVr`+O5+Z)4nTz*Z&HCK}SUU(9nJGUt;3o{C*cgP&+I|we|JS;D*b#{*%4i3vw4RW(yIJ zjI1muJl$EI66X~u1>KKzl8-~O+0wFQ`B!Q2u3fwKZ+luvMTHO=omNPQ9HfA=voi!I zh??|A>J#jLJ_rTxf&S#<=l{FVeixDo$qppzqG!{G(;1a?1$E4E11O%m^oksw`xbh7 zdSJ~prH^E-R1sQg!qd&odP5Dd#a}xA{Nd!~&4e}KoXW;ca6`yA<#VVH!B$JIc1c@X z+YB_SV>Ekqs*U=EZ@PjklNAe!t{}!V@+_*}qC-~O3uO?I{T?N!n&dfffbp)l)auO} zoNvye8z2O==N`4?=vJ_?8`h`k*SPWt3eL~XsTd;}R1XA;Rt{b|ciPLCA|_?P%fvjk z0AP>u63MQ{4Fe!GZu$67NGM@t#e&CXEFd$J{*mOzSN$0Z#p8L|NYxBbCyS)JM%LEy z?(Td*ddyEnHzumME9|D1fSz$qQ70Gju)F;H+D296tJkilZO_J~!uEoCOnBxK2a=>p zw+O?$J82QTsC+z+f(F~ehoUJ7&NKC)q1YIZ;s_=RxTLCPDn1}1;|6lunyTvn5Bhg! zhnkbKNXK9t0x20#z3?-%cPTf7y+%uSk5iG0qenL5<;~sQ5ih?>a{8XRhm-Tuxap>H zsqK5`c-H>-!Pwi|tEH>U?YJOaC6FZS)dKe}=3f*dO)*hG{wr5tLBj*{F@ zP&x#k!N5d}n|Xqs`waM$LJXR%(vp&xSa{?=A)9z89>ihNMu23|_J^nd0)nICg2lAU^l zo10sv(eEJO8>WxzJG;BDLBubv}f;SV?7RRM-h-<61o0whdHPj3cGXwv;QcF1s$I|$L<*=aIbY>E@H zi|Xub8XwpFcP+ILDrOQZ%J7a=vk z^F5ly3Y;3q%3=W2gGeAIzC9r(CIFnp#2dyP&sw+fa+}d|8!{3SlHyIU+r@uV0*7^3 z@{?dkdm;CL9;fBSZGx65EqwySp!xlNdl2c+dkYhjCaA%qjgsyah;e{b2XZtcW@cXL zl)Y&_oc1eF?wXh&hlFK!Zx3QyNnPD|@bsf&{!mWF$GeMQHg|quQDGFswnh4KNFN^^ zwIv~{&ATZfxo`lvJeaLsEaiKAdKw)U_W@kV)YMcl?+k<`Ci6=}x!R9TxhBE2f+Ji8 zGBk$}9Wrl#utrcmXu$v;xY%+Ny4l^s1D!z)<>_WVK?32SJggk*Hq0#E*3<}s z$_Ak5hphDV>(|n9a>m_B!o_K|E7PzO_obwyraYD@0{@ZmSck;NljUgSHFk9=u4*M^ zzo}tR4+rJHzwhk2G4im6GR?~UU~^ov+*%TSC+dA_^w@`*LhqsnU?508l5k_X3->$i zuk=E~(t&(aTv4Ivxj8;M+Fn)zs|KNL@9LTX_5&s|;$ni;?OgR}GV(2$UC@Y#Y%Z9}_f>n;V+cJ$p|ph#h2*?1pToxgvl>EiEm2b)E=twseXKZM@Uo z-|ahlQp8P#?f=9*od?tcjfGa+qqt^o;hsbSn$stH`{(7cLf0*W=OBOP{Qy+==t3Ug zCIOf`0|QE^Ve~z>o#2BZ-)NZ?G5i25!R+EVf$;}R7W zMO#G3aIO{5S7xc$!dR&Iuy-&=({wY|InxYMH0!ZaY``8&+y`&N!|}izpa(Dc`e;MS zR1uWoyvnAapa4ePWW21bY_!gc7ZjqFmKKNeiZb{GKF5Wd07ZbS?Vr}!^C{uIzUK#; z5G(|zr#}X(NGB|u2ve$^K~2NK%GQl57SbPZ9nrB2dWa#=Q&lbGccEvSvH=~3%IGGB zfs)wh3z6%Pwo9t1-Gk_S1{PatJsJg~sQvt()d&M9L=PVDNR{ z_-kna$QPBAsJiC~2nZ}JET|nF$g$h2gGEL;);bsM19zhj1a%Cy4oRk|x_@x>F`XrN ze{=ZR$ml47Pq2<@j4hX?6?s4GiD=9Tpoja>&O^{qpk?TBZkZAz6B8ArrEkJb1CJgA zfhRg(0t@wSI65{B`?V3Ax%he!$7evV#Paj{A@^%kTpRc_mq;4orqZtEqvGkw=*T%}owpb}{r z83A1ZN!orEldG$1EhMII;?q=KLR-WB7LPPox=2e)e`bxDgvcDq;Ty--bts$%BqW@! z8(NSe{RGs7cQCl5Y=Axo`_zs?H9|&Q?{kV8WK|%z#hgHW-^|qX1r*u4;k!m`hV}9Q z|FCH1^`TF|Ka8b@I#rEfZ;5RiN>k9oXtXQ>MqfR5oW{VoF^+x~AQ*C@o=OK}X#bVT znu^AV05}(1l;+0rABa2oJa%b;Bg9ozquKPUUl|#t*x#xz^#my9cbK~lLr@qgeSUWh zE8C@W9SqZI?{_Rn7NT8HXMT)NxkO0|7YEZ@ zUE4Vmg;KX|gHaCrRX$e8)w%(}$dDN4Ob+4=aLOpOF#?nw;C}G_ij`T25egOeOBBIB-Uv$uqL!h$1eZv4T2<~Pos|+g) zroHB18gatZZ#BlVfIWl0f*}WDOYhfdT-pWp~z)jW2nH;&?-vY{k*adR9cDq-`9=5e-BcGQ^#lnIwyPY zVjrvzF9TyR6j_I2r-Gw=_wF6JkUN2$-L~v)74&l+KF~E^g}r#DeNS0owgAt0^!dOO z5PW=mGfPV?@Nx9vvgBzZIe^(=mU9ya2R&_U+D%tvE-5cx%1ric93PK|AySCc4mPY# zmV(b714tPypdq&zq)On#QP_4#^=8VncB`_g1K#w#K~G!hGP zrgI>MDC}W~2ZMYl##wMl^Hluk2SwD9Ay7t(Q8?WPPy`_0m`O=V*YI*s5KY}BB=iSt z2M7W8qdNHzTdW8@7Kb?uaPADGak!L1TIus@247IUy^-Jr?PnWrz+iBs%qsRlEW=Iz z9d=?evM}H}5aeh3{Yo(GLkhU8WeMgo4a4II@TA7^ZU_6IV=Wi^;4uaQV&Y(sINWBPKZk~p;D+9V8i?VyhyI!ULmMd# zPf{2`)C4Pg0G-8VP^-l}B*=2>_U+q{kVyiGfU!@7*b{Qhc<|`if=^}*L1dVpovast z)hcmbRe`5j+98&AhiC((rWD#S5wieBm_@JhGt6sy!3Drvi-VIh1?YTbWhEw47Tvo+ zFdLW!I)_~04he~jjt(hUbCaoB51@=6fp<- zLPW3jBR7`?Ml4kjAA{nEvk+s= z$jOm|S^dgT9vM&r2q=F#g*de|)Cc;I|Jng&`zpI)qyKx|*bpI2fbLuP=BN1&U*Y9~ o#g%t!cw+zkR5Xio>s&#;<002n<8!g`z~h*en1413!$6L;wH) diff --git a/sbom/server/fips/static/meta.json b/sbom/server/fips/static/meta.json index 6fb772a5a..d08a0eb45 100644 --- a/sbom/server/fips/static/meta.json +++ b/sbom/server/fips/static/meta.json @@ -3,8 +3,8 @@ "build": { "variant": "fips", "derivation": "kms-server-fips-static-openssl", - "output_path": "/nix/store/566hm45mljdcnwg6zl3pwyz6fbj2717b-cosmian-kms-server-rebuild-1-5.15.0", - "timestamp": "2026-02-12T06:13:21Z", + "output_path": "/nix/store/4xxw6f5v4zcvg609d6f5vzjycxw9ghwg-cosmian-kms-server-rebuild-1-5.16.0", + "timestamp": "2026-02-15T13:28:06Z", "generator": { "tool": "sbomnix", "version": "1.7.3" diff --git a/sbom/server/fips/static/vulns.csv b/sbom/server/fips/static/vulns.csv index 75c021a34..78b6ff681 100644 --- a/sbom/server/fips/static/vulns.csv +++ b/sbom/server/fips/static/vulns.csv @@ -1,12 +1,13 @@ "vuln_id","url","package","version_local","severity","grype","osv","vulnix","sum","sortcol" +"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770854400" "RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770768000" "USN-6409-1","https://osv.dev/USN-6409-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-1","https://osv.dev/USN-6541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-2","https://osv.dev/USN-6541-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" @@ -18,7 +19,6 @@ "USN-7634-1","https://osv.dev/USN-7634-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-7760-1","https://osv.dev/USN-7760-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-8005-1","https://osv.dev/USN-8005-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770595200" "CGA-4r5h-8hvp-w6xm","https://osv.dev/CGA-4r5h-8hvp-w6xm","openssl","3.6.0","","0","1","0","1","2026A1770249600" "CGA-9vjv-2q8r-rw73","https://osv.dev/CGA-9vjv-2q8r-rw73","openssl","3.6.0","","0","1","0","1","2026A1770249600" "RLSA-2021:1024","https://osv.dev/RLSA-2021:1024","openssl","3.6.0","","0","1","0","1","2026A1770249600" diff --git a/sbom/server/non-fips/dynamic/bom.cdx.json b/sbom/server/non-fips/dynamic/bom.cdx.json index 88ec22d2c..fa09fc533 100644 --- a/sbom/server/non-fips/dynamic/bom.cdx.json +++ b/sbom/server/non-fips/dynamic/bom.cdx.json @@ -2,9 +2,9 @@ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, - "serialNumber": "urn:uuid:afa986f7-fffc-45fc-9d64-df129ed42113", + "serialNumber": "urn:uuid:55774ff9-29c0-471a-917c-0e02303d7d89", "metadata": { - "timestamp": "2026-02-12T07:14:05.036850+01:00", + "timestamp": "2026-02-15T14:52:45.729571+01:00", "properties": [ { "name": "sbom_type", @@ -20,19 +20,19 @@ ], "component": { "type": "library", - "bom-ref": "/nix/store/58narzc5nka19lfx3zhy128bqaq2c8fp-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "bom-ref": "/nix/store/f85xm0zama9gc9f81w8077b9jj3rbril-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "name": "cosmian-kms-server-dynamic-rebuild-1", - "version": "5.15.0", - "purl": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.15.0", - "cpe": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.15.0:*:*:*:*:*:*:*", + "version": "5.16.0", + "purl": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.16.0", + "cpe": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.16.0:*:*:*:*:*:*:*", "properties": [ { "name": "nix:output_path", - "value": "/nix/store/8mi7a76vbmibc3d868i1yp74mrr8ifc8-cosmian-kms-server-dynamic-rebuild-1-5.15.0" + "value": "/nix/store/cgbpirvj57n0504anycgkzvkk1m1ks8m-cosmian-kms-server-dynamic-rebuild-1-5.16.0" }, { "name": "nix:drv_path", - "value": "/nix/store/58narzc5nka19lfx3zhy128bqaq2c8fp-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv" + "value": "/nix/store/f85xm0zama9gc9f81w8077b9jj3rbril-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv" } ] } @@ -113,7 +113,7 @@ ], "dependencies": [ { - "ref": "/nix/store/58narzc5nka19lfx3zhy128bqaq2c8fp-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "ref": "/nix/store/f85xm0zama9gc9f81w8077b9jj3rbril-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "dependsOn": [ "/nix/store/74hh5shwd63bla2yyhq17c2irx1y528w-openssl-3.6.0.drv" ] diff --git a/sbom/server/non-fips/dynamic/bom.spdx.json b/sbom/server/non-fips/dynamic/bom.spdx.json index 688bed5e5..c391e66ba 100644 --- a/sbom/server/non-fips/dynamic/bom.spdx.json +++ b/sbom/server/non-fips/dynamic/bom.spdx.json @@ -2,10 +2,10 @@ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", - "name": "SPDXRef-nix-store-58narzc5nka19lfx3zhy128bqaq2c8fp-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", - "documentNamespace": "sbomnix://a1132d42-93fc-432c-a4f3-dec2cc42cec4", + "name": "SPDXRef-nix-store-f85xm0zama9gc9f81w8077b9jj3rbril-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", + "documentNamespace": "sbomnix://81653b1e-d020-402a-b0d1-8b49c5e78163", "creationInfo": { - "created": "2026-02-12T07:14:05.786635+01:00", + "created": "2026-02-15T14:52:46.505939+01:00", "creators": [ "Tool: sbomnix-1.7.3" ] @@ -14,8 +14,8 @@ "packages": [ { "name": "cosmian-kms-server-dynamic-rebuild-1", - "SPDXID": "SPDXRef-nix-store-58narzc5nka19lfx3zhy128bqaq2c8fp-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", - "versionInfo": "5.15.0", + "SPDXID": "SPDXRef-nix-store-f85xm0zama9gc9f81w8077b9jj3rbril-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", + "versionInfo": "5.16.0", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", @@ -24,12 +24,12 @@ { "referenceCategory": "SECURITY", "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.15.0:*:*:*:*:*:*:*" + "referenceLocator": "cpe:2.3:a:cosmian-kms-server-dynamic-rebuild-1:cosmian-kms-server-dynamic-rebuild-1:5.16.0:*:*:*:*:*:*:*" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.15.0" + "referenceLocator": "pkg:nix/cosmian-kms-server-dynamic-rebuild-1@5.16.0" } ] }, @@ -120,7 +120,7 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-nix-store-58narzc5nka19lfx3zhy128bqaq2c8fp-cosmian-kms-server-dynamic-rebuild-1-5.15.0.drv", + "spdxElementId": "SPDXRef-nix-store-f85xm0zama9gc9f81w8077b9jj3rbril-cosmian-kms-server-dynamic-rebuild-1-5.16.0.drv", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-nix-store-74hh5shwd63bla2yyhq17c2irx1y528w-openssl-3.6.0.drv" }, diff --git a/sbom/server/non-fips/dynamic/graph.png b/sbom/server/non-fips/dynamic/graph.png index 9ff463ae6df9f0f773ef7cd3378857380c1ca508..59bc8c7f28408007b23f3097e17df29c2544f3f9 100644 GIT binary patch literal 10801 zcmZu%WmuG3v>v)UB_u^sP?44fB}I{tE>WbrL8L(ti&j8N2?1#wx3=ZL_}e0%S;-da0SOY;s1Ap;=_g(6Y8tM~wg!kmP!CGm0L|LQMd?!aHT7HW4C zQ5VRc^xE9FC=@G7MN#gdSL*tNuaWxE1>V*W=j#bOrGjx?7m`p7zJYkf@74Ya@5-y~ zQannYcKoaKdwY9xU%Tc|Xh*;n68B2?U}GZV^Jn~9w{HFT^-E16RdeRw>d;+P zRe3o%3|>CIE6k)v5&qk)bW2n9GRiOMF>ICxzuc(gPI&PGGgaIbH$l);Sy2%?FE7vF z3O9V%U+v7CoUoD7Czd1M9@C51C1y1*Yh9M|daj+TIWt;r>veuwoz={iM*ry1qovhV z%f=Tt`c+PBK6^`l*3k5wNds901;nwjvBTdz1+%iU%q%Q06%-Uc=jUgd)(0G(?slgz zlf#O3zI^`txgkZ=aqDjfRY+J^)6fuIkxA`~q@+vx8xzq%Sa_-uijh7$e+dS^8b>!Y z$iAe%j(PJ*S4eCusd6k60S*q%j~_qoN+|A7@bU7>`}jy)zU>q8{5k6I}wdak$#`>bKI; z5}Q7*)9rSa!u{m$rQAF`LAABF_4#SrVwt1Y$0`-{^z?eoU*8*t=Wehlar*m%f|yZ+ zn4dQP%lw1WDADj{VLI$(vEJTZGe^f)W0j80t*tmBA|e)nIt5Xl z-rnNz{EskAO-;olC7Z{`(T^#R0?E3+y}eyrTrAuD@wW5Xu{&(-U5P9a8Y-$_an}V| z6O+pyKYmQ}(_`#)b{1n=o2qB|?z!2vGLS#Bw#MH@*3!l|3FRYn^QMB97J1hP$?%T1 zS1V2Wkt(#&($pmV-Pw8H$mr$L($l?-3Bz8t^2on`t<*nCU7Blu)gDQ8mG$b?tIKit zHt$}&BD1rz+gdHEZ|dmyQt~%O4=w6ANen+WLVLYF)}w%jrHo5Ud$rt`i_}Av|A|PA z`zqIRoPkb2fHc>=k1ydEr;q=w#=U?4-tBHkL}zcQv-P;g*z?(8~m%vzl#a zphMcw-n&k_3mWRl!YaKpfA2aJDh8!}ARZ7aJpXESv?(F1%{BSy>qr5hpV#o50TAvi8#Q^2}7= zMQC<*b}?tu_hf2n>V}RE0!9(LbX8FV1LTD0iN(akSb2E~MIFZD+{6SH78b(B$Bm%U zbb2$$do4Kb#J0S-qE_s_staXJq`^@(>%Z{((p?o5b7*FJ23B|*`DA5dW9F%V6M^%i zMHZFtUW+@gF1NnGA=;WxFjbYHmN#h4)5(uZN{WOcC!DwjZ*jEqI59D?C+Z!%`Yv9X zStBMiS!Pz2VsD1t%%46T zUT8#)KWjNhBP9%=Oi@``RpOmB5h9Zf+y$c~@ zkv1Eza<;!r|KGD~s;ChB{Q2|l-Meva+?}*6EM!o)Zp*z&$oli3kHh!&+^A`22<)gn zdp&vb1PgV1usOB=`oB+p^zQw8@4!;Y%z^^`JlnWeZ=eFim`Gh*T(B!thAz^}%BWF2 znRi}Qyn2ZoT<6ZnlQj1g>B+~BA1@6RrDZiAS{b9gD8798f_nZZ^UiM07wUFcJ~=aU z3>^2Tduh`2k{))YzN%0yxQ&gCKYsp{Pm}gf&(6l7p?S|We_ux@bb8v1^U9SB*mEHv zp@yCeg%p~5wuft_-6&LRYb)j$wgI}j&&PAWTJFm7#>96gPtSy>#Ny)OW;c?AZrphB z=@UCZ11AHS4KvgUd^7Rp6H-_&qcK~4=_>xg1BKC5>HNUU$u(2)?^04zne+_}Gxds0 zv>rZenfUIR!c-p|j0L|RdY+k^JCub^W*|%H46Cb?hGIkjr!z%VK|_P&*|TT(WMp){ z^><>K3n==C}|Im)r_ zNZF#ks_t}0ZFpp42G&>=cu}Wl!CJTpED-$R19NI>s?%Z@vr2g1f<#kof82ge_exrL z&PHYRJeQaly{@iq@wabHYa^vIb8~%bmeaZctE+vv_flGSkN?^J{&<@a0K%+9KQ8|3 z+1tv1Gam%^R8&-Y{`|3Vs}BeWD6Xsw2h_K-x5q$1vpx?B!k`r}2#JWm2ZD<5XJUy) zqoufcd3U<_mW>v=)5thDIGCiowAMB`xwxP;usk=$8ykYKywghc`Rzu&;gFJ&0(lnc zdy7j*Gy(dw-$+ugs;-WFe+P~SIN-%lktv6i6jQCwKTOn9TifQrLE2zEvarz5 z(Bbx>%S#S6Sa@WYTXq+_C9RZ#;<`dMvJKuykU{Zm?d}HWi?o$@@yc_ zBWAIv{#@SK`8pFb^AT@&t?xk_Agqwp5Au@z@3uqN_SQz;3Z8e%TrlP97B&H7PcJV= zvIL%%EaUZee2{P_ROh0KrWJTmT`iuYo+K|Y%py)gLb5jTJ)x+V1Z8b)J^bx)^l<4K z+G`v0WPiOGAm)&F0#)p``~bQn>U}q8mhG(>h0~+OG_}rpsXrA?>+gRE8!oS=Ml@05J~y_%UO9y+8$F5b<^g-=~9@b@aWy<&NVLqv=3XQHc%i?S&4*nm|dhy-+kId;6i9(~JpFyehTls86y-Tizu zRaHVCA0JrJij(7+q*b)1k`j)?R9(!wchqj1lgtWX#6cj98U)j8mg$Lc5gp_2@9(xg z`d*N^vd{n7GhPsE*R6lk0~c%?$nx^?A{=LO49_47G(7axSi#1Ihf6&X1wDZ(_m6a# zL`VMoscOPfU$focoqLYL5J`y{9@hW+_iwu6R9&KoJ;PMK?)?%#P%MBKdTBqgmoHx? zPvmJC84=S)w;qh_E%(iAZcfe4Ek0ZG6V2h75)>4?V`jz*g~BQz5OdwKO;%4Y;b2vF z_~;bG8~pC8wKco`{{D23QiOzrXkn;2JZXF!lF*j!mBfj(kfB`>C+TrO zkbdIJm&Dk(xSxuP$w8eaO8ZL`HN__-bqwkGHiwbKy?G-K^b0bt{lxERXI|^U1IksY z2zJeC8^`FL_b@`}Lk49=LBiS^%@Ro5^Gvnwl`1 z!^sky-hC<=u?qM+=rKi^p?HdGaiS|39l=R$afjw{rL7TCB(Y=Bq%O+R#w#D;Goy`EY9iK8I%)oolN|{UGMW#@y${w-P6s$i(ud%0K(Ux3qepS zfIOkQW<;LU4w?c1h~g1DDZfK<5Ibl>9akWUnd!#hyXxw8|K=Qj9??S0k`WLDg@xgs zpYGnXdh&!rT>Mgee0OU}jR2Eb}YW+sP|#x)Z(K5R;IGDBT=@QW7>RyVd6IvGp4g1I$# zMAsj~AszyoZk-;vf=g=X>LRslkDV{qFRuWsK$Uk>3kV2!d3mwQ$gm*n_~%cfVEyR} z=mX{58O@>G&!4%AV;ap6X%B^CKQS#?0-K2{cO+zDViK}w!AI_$;!@-38o3{hJ{P~yuMy$Go(J?jN$nBI8i20`qQURJ-PQ-iuL&s zHnI~*8Op1+9}}U!bcyZSHPW`Wwxz*B#4jk_cq(@IVUmwYL_bkC+ni>NjGrd zQOJLAKx4ysqIFLvYkiwLJ4rk@CtIPj`u@5aJ$x9lwdFKCHa0h88aVGS9dLR`%OZm+ z>GD))ISYWL(h8ao1HED6;q4l9B5%92v}Cs2n~hIQOf8mn{rYvF_BoP}-oZf-(YQOi zyXIiN!D80o_06_MJD;C=508#EfomK%n9#C4fL<%{ST{f_1!N3*Ir4$FHjecR{R+EF zVPq_^k4mj0rNZ1-2e)hZgv(#vsywY|t>xTsm8W+uimV!{s)L6euW^s|yrx&69|V}* z(A!JN#>Pf3WQKy>+X6PP8xhLN&NhGYB>c@A%9fUvh?jayNcAh}>CqV&7$EetS=!Vj zkEkq}vpp(6la`hJKh)!)d|;4^eGeQ8jH=&M+JjH|I;7!`c|+6L|kIu)T{a6G8b{&haSzLp?>kxdcYgap9? zJRZHc3n$R1+0&=^5N#kh{Oa=U7lnlabtfB=sD|WQwn83j`eNeZ=0D%@pq~8#)BN4s z-kt;x56=V+zs|3n)uCpvr_fLoNf~6G0Nf1O!J&yxK5*Ay!K1C69eFpmvIc%aKv%y&Zs3F;C!3Hq%tC_G3<*wp zRu*=8MYb5w`0hfdZK;2>1RdZQq6z}ekDi#!6MXjf-v{T=JT{ghc)_EcBMZm1bRGEQ zcbW`KQ-pR~vSGm3tO@0TI9r!L+e$K${B+i|0blto?jT+VxV)*U$?0Ij7*v0Cqopm0 zhJfg-vllW+T`) z@T-2w3rAwy%3m?j(L~U{49toGe0+T0n4C8?objGjB#`QCFYLdi+7I^xJ&Nuasa_8G z$2b?zrcvrJApx$~d=l;5)6;`ED6pgHMMZ+&vOhVn@K0Z`p#RA%p3Bib!N3AMJKgyu zi0~1pZ2-CZP|6U3pr+5h*B$5kI1@e9rqkHk+G?0-4u_1DVO@LV&75P`(O0$cP1gjK zfURi^llp+pg!X*BA`}X89!#3dFj`v##i6KhMMXvJCefE8mYJKf(tLf&T{dFulLz<*@^8L`Fug zKiGEAtbR=mF$JmtIMv{`;|61CQQfg>`fDX1ENENwh8+nB{#^X)(^J17dq|eRkNB1H zl!@NFc@reJ4CP2AD2fV)iBU5K++YkF8=HqZI&#pMw6wHBqM~;oV!-B2TfcJsIzs1K zQ2z8qe*j#F8HDk{sNU7oT=4yfzsl0Ne$u^O)6r?Dt4j+m#LuSM_*Y10rl1|pJt)|^ z#e0yyB7OrHX!kh9_SrKFP>_B!&z$?pb0Du%Fg0a4KR*Y1Ee#TB*vv;sNePrI0kdRd z;k1nZaoL}<{na5d9v&VryOc`~P3xG0e`sx1v}hci=`hK!GFRd#Kzf7Z&2Vt?^77NY4G--AVzu4kW15bac&7#Skqlo>*#C$~@9O;OR083kksn zS~lMpuh#!&Mergx7>8FTW?ef~zvcGSCkuy_f0VRup>f^Z-4PrQvL`9G>r54=GWGvQ zqnRoe1dPT80v4FcFL-R!Vk*X1#(av(UEutn{=&RHmf5cz9K-N5I&ao!Xz*ISKs91Y zB3w;{MebIA8PXq4|CPh9%C#aT5?(d0Jl?1kW1}f;Uv0+dx%C&C$Dqv7-Q68UUZbT6 znY6UuVb2=PiL^BWobc21ygWi!*y-WiD-DyF;=+g%;xDEmE3Z19au*hhu7I3JN5SiF zO`UOXxOqm?3AUXc?NTr?y#z#HlJp?<@bEyQM1bHnTQdsL4?>8w)g2Pl(a`}_FbAg; zql*SykNN#uJ>%es_D7xDg=M;`9AXc=)KafMbG@krBkq09ZFzmyXR3gW`m= z7Kep}1(<3_`W`qh!1qzVi@=LB(T5KoIza^aJLx8#%;^@E!+2HW0Yl-fvOT}(6Mxt# zNCBIAddMM0Tlkd;0o>QGU*!#17<;qT=z#kvfw^A*f(_e=fX>@$r8C{iwvF~Dy6Lm` zbn;BAK3n+qZQ~_RL}WaE9Lg-|u@#Ge$P&ar(H5`WjtbSr7ZueG{-oNbf>7w8H1$-* zzUJ^N5LnifMcKjDM@=|)yeu0=Axts>OcfOsn1Od$WCDn%FAVDp--5q^0tf0PdY6!} zTk8OPrtIM%a=f?Py!z(KPcVYl;W@@@ed%auX#8m6dwR4`4KPzNxP9IgVK}njL8o8i z#se;&XSo;~)HN;?I7UjRG9);r*_EF@VJT-pnO6%!R~e609aMs2sBv3H zbX!K@uS$oBCa_w`1BY=533#x@`i~wpg6ss9I$UCj2Wd^C)eUFZVEBIIhp*zAY0@!3 zbolmP7Dy$EB-IkR!NA-G_wxGPJ5Hf&)=FQJ%F9D>Fx~-DWX#CO@S|}g4G#vb!Oh1f zdd!ht>;CzXMnORVD<5ApM4>x{ju+==zIMaKK?keZ4iXzEhI9|7d6*Amq^CEmI{Ga4 zUa6|7*;&5>t$o{f-)>+qyUpo4Z~xR2-)_&m?CenRxHAxz77q66=&5yAR!voY`z8;1 z38HW8W6$eJ>Z#KHHIIrC0uE>JxVgC-1_o$=>8Bav1_n>QIznt67a!kNV%e@`VDR%q zii0DwF^M()nsF4&36S5teEISr1lI;kYIk_*pC5Kd#&2Yb4;{kh_$_jah|nV8T9xzM zVNJHv#nS=iyNF=iNBs;Ft{g9W59huHX4*_;1-=rKkk|>>8f-OA%)ZjM2f%6Gm!rWg zAV8C-VgU*e5~e1{`m?qJOWFQ__4W1pkf@5%*ut_&nI%Fp6v8W3)G0oY9Goxp<&psn zBQXrx=O3Z({@QXJkZeT?ga)V2A(BnK?HliylAq6~s;0L6ORyeaSiQBq9m2fSgA2ru zeQRaDgQNo>Ri*roAEs~m1CqcyPOLQsR99C+l14N&Mu!{R==-+8e?KDSe@`6{hM?>` zJUqO4YKjFmeLiIbC>2MYOWUmC3y5ENh@!4)rcS32io($jUDR#(&3xJc)6fW(#(8b{ zdfkTElde=bAO{i0$?*)@Zj9&GVE!~^au5u`ujr?66m^8#e*SK z3keA^gPnr>1v9$!1?XbgnzAxs&@WU-MgSQOct-EQVHa0d=h+qlWIPAehfhk{W*T@F z3T$8j1%@{LGM@dey3ZXN$sEK1GDQL5hcOYVcnD zl1$NTTElSTyY!VSR}gw$>`n`>tQ7qy6G#d(Jti?Hly;7~oP`BD$id#ezHN}pyLCgg zzMg*<7TCchK)5LX_q01(*@ z7EnA5r7NE@Zw`|KRRsTe!RYt0v|ogPVFl{*hX;ivy1NxFu)BLJ14O0Poo{}eQ&Ca< zDKeD-pEUzeECkIy5_&%onB)`01TkG61GL1%#Bop_Fb9G}7cuw1F35u81x4De36&jEA(a@?YF&H%> z4-U&kA_Wn*QHG@@i5dVcx8yB!>(>03;MT=rQoi_nP921O za07s7LImzzaOuE4eIsXNjD|%)GA|2AkBf^dPxn*IeT5ou_qywXdYuDzXUrmkW`u;u z%@7bVSTK7arWcZ3J9BZSyW?}P!3@5_+{%h`u;0eMwZESliMNNRf5t-~EDs>9WYV`E zmzw(9P&OCxu*3Z^M;u(XdKllqSOac>5KXVFM8QQ3&Z}2NYo2R@#s>t~($|lu^FNU{ zG)xiPg!b5};d2%+sv-xBM#^kz5gs&A*oN}?D2o)_VffL}5d_mRVPWC)j10Eoi?-eY zW2Vm==ZveokM7?Og47d9s~soNa**L(hmZwH71Q0tf#@bDC)v|P0jux{2pS;>XM^v7 z>4HfLfm^E$e;SOuz%{V(@DSYg*=vBgS175FqoAM(x&a1}?)FF6(;;B01ql2vyeZY%CF_$guv?Rzo>CIsJNS81iSQr^^P?;~#|}!)loHoBfIF zvVxH<5J3|hV@vX~3MI@k1((V1UUj=T_Xl;WyhLn>>5sldjBEWn5kp3%-h&_(8KY~s zLdvlR36r)S8fJnRD9{w~PMjfSmqBjpmFCD5%9T;hOJ%hd?xK<+8@ zrOE_ePD)CWr)yuagE%P|)OqspJ3nM#eSUu82!KdvOoT#VFKjQ=`26Et==wke91Nq> zN}KfmZoU`+fOBaiV}lJx=C!>uWl>2tpRnJ$MFRsA`CL;T+wB2r_o zdah{<&j_9TqQ1UfQE!nQc`JlL5OM^-X6bxa4~hZ6vT?A`@JdCCD4W2){dGgAQ^e82 zp!w4qf@|s837`*e+`I|HSzci+nXAZ(7=aj=Vp(Kj6~amVh2J}%;C2>$h2vB#>@7ry z`pCr;D>&RkNU{EaW>_07&u=Uv(M5wh1kw+Myrb#QpAwy5PI$KnFX&D)Tia-vi&JEB z`^HVI&;ewee%VtBh(W@DLRBP~ zFw2hjaPZ2Ylp+j|;JyQLp$MX`H>C9~e8{zzk%9hxGbDno^AiVSg2*no2%{1{U=5)= zE`(ih3#}Q@3Y@?j(n#{x2;hMcfjechu)~ShEyMJusC+TCK;HlW%z#9Ky9P~1yNh3@ z{<~I#Yhh`5-T&B4C`p}3+K(Ql=8AB^h?7}2W%W-c9+E@D(7(W>mVt@1`HJ z<#)J+!B0yB88&1c@(&+UgVJa@4|r=mnI`3ZgOZBM{MoZ8m<^i&%vQO~6T(5M^xoza3ye5BJKjJQ z9%X@>oq=M3*_k3t=zuhYoM#o0vCGwq2Z9M5)>7LftR4nTHo<#3xOzvRrWq? z&(ffwrA4|9WM9O~m)NMpq$DIUIb6vvN`CvedDknNab*_c|pd8qPf4 zN(CC)j}oqS{NGJQWF7)S4aO8(30%z>`nl?qBnx(+Oavizu z$j1lCEtayfGLnAyfCPHOZ)md31^WqaESxukS9EPt4GR3MIG$ic(S1RQxJ$_Tqm4%Z~=$ literal 10454 zcmXw92RxPU+gD1VC@YyIvPYqi9pcz~?~uLst|Syu_TGCI$t*%fcJ_!IJLA~LBQ2qVg>`-k{`}}N4*V+j{OuF?4aY?Gi3HXe z@*}N2_dOQYEi4%cF*T2*zmx82YHc)MH#uKx5nWAtwyIoygH6ojTfpnX=YO@8xNu}& zN98G+lH6&HVwAe}D5Gzrg=kgl8ouPU^6z9~+M*XF%L4P5F0UTF_;{q{7MRTucaZe{ z{oLAW*Sd!JfZ%y069oMIX(wDTy=JKmI|k8 z&r{CKGpP59-0ElPD7u@UpI`muOS#SH{ZEyZCG&3?!AJK52s5%KFv;&1L~-p+a)Ou(jBeT|!&TRxcKxLL@1_X@1_P^qC}7#aJ<_BPw9YrbEL zE=%<6>S|Yiwru&wkEW-`2jmnKWb97=b{g{`C8hh-RZ0hE=gcP&G#=jGXQqb%Z7nVL zp7q|M5%T)}{33o?Wu>I9Zr8=zA87C0yT|wFk@N1V_E3@bi_FZ-F+=sj*^}MBx~<{V zVG$98tePd?hlZ*=uKz0$rL@F{_9hk; z9!0EM-T7dslK+8}Rio@_J5i28az{rr>#u`AEr*sztgQHyl$71ckJ?J~YZs^Lz1t<( z{}o>Y5fKqQ8XAi3Wl)fEt(&cUuo?^9ojXfY^^cMtxtn*!un*=bKOVS^D;^k5#s54r z^Nz^z2KL(8+C>J=>RBQ8HNA<+$y>|G#ciGen)cRbc z8J1hZZn&&ZB}1h+AMZOBs2Aoey}KZ0`y`yoxalRXhnLrVPt4qL)O_R9<8Lo6Y1geEBM0Z5{49t(tCMP7I5+B%dadVqO2W1oG{cE`8t=-+$zP?CU<=!vO7SIB81k?iG zH)fjoJu&o?HLe3Le9x8WVJUAve)TRg@>>x8jo$u#m1ws0lDqh1Y(_1iqDQ?#19hTb`tngxQ4a3z7ElHm{r~m@{W2zojDv&Y<*Qdn<-)VszzfjbyBB$|wO}nk zBF0oTRIJPGwyHJXld5QLp3}j@!aDWHZBy>w%8JP@&x5nohP>F z&hjr=k^BGd7dn?2AzaYwTc@h3ny*=!lGD83HrD7b(%09A^~rWzLs&jrU~Q^iR!fV# zCsia@Az8p>u{ZsP5JQTP_p8Q65xC7@zUn3TbONunMxNmP`}a5Y_80-Dq1;W4jm5U+ ze}<7L%Iq&@MqqjDEJycSpxCD>EbCbhC(;sJHfJTFxOpfZi;JHxDJjv?);2aW5|xvC zBlYJxsujB5!PV6a>YJRLoTOS@LsFAwE&KSxFW;CWK9Z`5S-pq2xVUl&JRv%jR`9{E z&}sP8jbUNgXG^em=@=F{K?dzLSeAU<&m6nEyKGuz0X-sTRK&!@o-LBZpFVy1 zVagniC&m&TTJ!1^)G2|cre-+xqa2OHvNEo&uCB%DMv+)f!+CUPER~QK36R4pLRtkU zC#UodcX#((*;tMwLC+}oj@dtdUgYO96A%zsEnKIi1-|l)<9EJ`@D>}}8$iR2ar;J6 zmY68|+7k82R9FY`P5ESj=*7in4g0hBZ%<|q0mdDjoMz!xdi7rFckW$gScm;-YH!Dd zTXm<3lrA}-^gXL%F{&DS+G~H5Mx4UDCijny{`~$O@Ztsbi%W#_KO*l)PF;ehl#`c_ zt{To)%~kuu9OC5b>+9&|);c;GAJ1)Zp38cO4Zg^Qym)Tkz73pHkUSkc+y0&r7CJ5S zP5}{V-|Opl$|@>MpjNE>83hHCs;l|n0TeT(-p-8!^2R^3r-625)2)&#uA7*c(E4b8 zRajUUuduA9rl!Jj;BF=6M@NUr>PWeu@8O5vzm2SZ6dfRMu3UhEqg8|(jQq1gBQByeRg zpBOM*HO~bb_?XLnO0d#m^o#$QaAz#11zZ|0+AhHHPpfjV4sRs}p_}0n{XemWevz6r z=T`szbp*I-k79s*q_DM({%Bz>aS$?x-Jkh{u=UN&%q6Z1=}p9YDi7qTF9DyvdGn^D zZldlPT?%Y&Q*-k@Ufyg}Gz(s;?*Td%tHq00sgHq?@gpn~6j+{NqpM?)C+_F~1f4LYm1SRTG3 zBqD;--TtK0EX-X;hXN!B0}D$ikWK$5OI5F( zq$C8hm!=yVRT7GIKV#$7 zjC%k6-u?R-hK+t0yz%B>LefL4o&;WeTU%Q|IIRYsFFr>vaf!Kjc+^(-<|LC>a*Be0 zxB#@Fj-SB&%FD`_-Up3^s+JTHKtg0`;YVTtar8PfGFb5)v1nmw_3SphTd#p{yE?w?10*bhPOXmKvs(o3;^=lmB>2 z`LK6*xNTxWFW>Cutp^WcwibG}U{S1~+*e%~jA3t{Sz8zC8x!E-o=cNYd@%9FIr!^W z(WwSs*^lNw7so%BjuHF(SW{HD$2J?co2XVUnGfZ3XP*)i6CSh5e~fo;w&^I1Q+i0J{JVvLKtVm*Y@_1krAyFLC+?*)x8G~T8D=< z(^sJ@|12+er23zR0I~t+UbuMip2KfZ^PZHS@Y3--mPC8&(``^1rzc0O$K_qgJpkTw z<6sUB_8QNS8o$Az_Zuj|W~%NcD0NWXu@*E(yMIk5svV{2i9ip&DlRUr6IWLQZC_+i zpRlp9K{S2VL}jmzw{;Q_fF0T%09HLEx%V1u$3BICt|z9U z>4xF}XjoXAtW6U3r2y_&n{F&68K|@#-q_vcsI1uf=)GrGIgrjG(dLCOuQhdOz7e2IqHDi9MAUl1S#MI;n(x$i2P2Gcqz>zj^Z%igg<(dnsvk zx{(&{P*G7qQkDA19bqcq;hZ7IAF{?Ji4_&#F;0)B&z!)_z(*aNoH9V-W5^0IIwdwW z!k{Fxdw}nH2L}FtsA8aSmW)YBA$Z!z?BM8_u3o6|$?6xLrsl8{?~XA*NO*X-&t}UF zc&h~PTm-bjZ(!q~obGaStEOl?z;Ya~vfW;vP6gqQG!;m3*}b(%M^{(%j`45b0>L?5 zCnuMNhBYuSa9QdPf)!zDsj&LRQe{6K4q_SsY+xK%cnSbI&x`8jATL2CIUH_V!iOc5 zl&*m!RrNA2Of2Dpt9KS@e_WibeMl4{A^byynkeKYi+aHZG>wU==?e+E8R$I32Dz+F z#P{|pRbo6r8v&RM7HO+4acd91$GA+2@mp_(hlBw4giF1pm|0kO@|J=(V6}Ve&XaI@ zdio1bo;>la0Xs9hu)rwt8;HAQVj}7K9jR*+6sTkYSFl8LP;5{;o`v&>v#F?<1<<}i z&J_TU@_TOXJID-v_cbbL1&|7AQ%wRkBU}&cr{qjb=s@mAes;S`&V>b3o+B489?hcu z0n@&8ayxyk(s9_i2eI;Va8VUPdm zV=$WJ5ACQdx|5UzQb4mHy(WCE0Jy|uc`)P#r-6~J?ORY{O)o6F;_j`Eehdb=U}9~p zJ8QNuJa)1-?a%Fd=mK&psI;`y$14L`I{W6$)(Bcfpw^o_&y-S*xJ+BGc)ABQ8T_xV zRrdJPLu(c!CY_UX9UQnoLq^edh7dFMH~RYnui{?5oMznoijSY)@$VRK&?uLSiwjil z?9R$Ccn$s@k6+4h0Iz_6##UCS=>}i)IDqp_K@YBJza#dBh6bpuY`qv(@1T_7-!k%q z1#iN_R1cN)HSDJ9;@68c-Fs!Uudvf1xI4!@)cy?6HQ1aRHA-HxJ-oFJhw=2ZsA@(+2v&vpa)ogoQl-aO9WI#2N*PB zx>NSRp=*~JodbGl?dZUhm6c^ zvd|S?US6WRLn~w{>Ph_0NUhI1hr4w zNGgt&5$&6o$CT~D?~eu-f8V(2f}WnMUDd!6DdLB zwQ~>6t~S=RJt~d+b#e+i$Kz<19e@b0^i3kKb!(c~3jo!-Y;1Ct53m6rgG4@n9*sJ4 z2R=Cf;z2~|t5>f?-DDj>NdPi)0{#k+0Z`q!bLYi+!;yl4=kwKJ3q#)>QrJMHAC1su zQ1~)vVQ6ZpH{^jV%l{9@NZEG#Mh^2IKyni163!@}kmbN8a(3(tlI=1c-t25k7}$ED zX3tHHE> zM&R&~%MK`tC|6pkA6S4nRDZTnpq5Xhnyb(~AwUE$ISpOSH&Bn!DzIEnq z_eFCjN>9(n zdRF1(Ilm>{Ib?t9Ei<|BQUD{sC@IvI>bo1SVjv|Y1v`12hQ{D7>3W9V!-W14{YO}K z(+&D|ozePtI1TEQ4&_*)qmq(}xDv&+KbDuz0Im*8kJ{PUb)|}kO!Gi3fd7F6CJ-ps z&CLy5j7qKob#{k^HiQw3+}y-a&)J(4kT9jg_DV=dT)TNQe?w6Dmx#{Lp5c(IYK%Lq zKBRK0(yS{wIaV~j>Z~5iOH0gx{@}w}KrK7Cxy9@~e0c9(y8Uzm9;ubgW+%?TcrSqFs#9Ej2*Ig|v)}^0FP>%6W|`GD{Xs zQhV1M=am?fZH(g5({FYjhdSIdv;5ZoFo3I8wKYXkFF zR#lZF_5ufwJ&^zCJ!zGkD-QQWjcb_mLiatFMI|H}Yy|a=&P}`jD@1bgPqJoLkdR@4 z$$f6_=B}Qe z|FcBED(2N@;5AILrh4+0PXDmI;~Il&D)I8fjf+=RI9B;Jco!?U!lKZwRAJ(iD^io+ zlrA!(gcEeiin-7fl$6+cdQ6O0iq5v zviFnCXi4ZZ2t0`?C_*LZls&SqIxO`wz=gg;jn6GXycyl!jw9s?L=*rLy+22u5_sta z+yY_K2wIUGP(6GC0(6nm9Z#o$9A1M+he!eFxBc@pY>Mr8RkYVZZDk4TZE>T{ia7o;{J=p+94@}e%qSAN<%}#qD#A_nyHW#(QS8GOB5tq-t17cE&w0L|^ z=E1aORGX2YsUU1-uKd1`bX`np2$LEWmC+llJd|KSCHch;r3&g3%FG-%809a0c6wz0 z`;5I8T|P1YGjX8GR+qz|PFhDNK|F|oi|bkdgq|Oa=160UD%e*zxa=nQz$zCnm3;s^ zngZticBC{U8Y+3)Ioa9QDJf;ad_}LJFA>r(p&3@j?$$PrS6V*-m*4yAm-=Xp&+;HM zXmgFM)?o0<4s$=QQ&CZoa~WY_<6JT7%aDXw!VK6O2$~!m9F!jEE89#rB*O;^Z1Q8S z3iR;HY8f;fF0&pVAHRP6S}8$AX{cUGBcihhmXqJ%H&$R^ARehbFbC)XU~JBfC!*S{ znjaJR`1q6{z<6LYl2+DmQtQ4BR1|YOEZgk@5(47_n`^c*RJ^#d(s`6fBj|CBkdQFQ z>B`ls`Pv`NL#jAPC5F^*yT_XeO@nS=1`D;&aWkyMsd-WC=(s@2opP z!UB3o(yM+Oj9zAGX#_YN#9o1dMOmT>S0_LgMudkGKta!ezs3A@baXuE{(-D)fo5qq zd^bGb{Ly+NryCm@eRvW4PYZh{(}KsJ*0*?Viy+F9MEp}=g;-om(4e@9sTr6cXu}ulFGFl!n|XsL|+zy zNLiPh*P&8w{*YJ(LoNm;oD`W+z+|J-ESs{Tmfz=OXBd1yne&1|P>-OXAX2u|{%7?n z&4cg)xC8_-XZ{d9`@}@qH=byue6FvDDZqsCvNtU_Ubt$Q;0Pxq)}CAQ%yqs%rcsSD z?}WSuj7Qj+yt4*o^6f~J$oO3gXJ{Uy!=kH*5L^L!A zgFb^%%tzBUf{e^e5ZFeLt$^N}U0MnOZLd-j7e@{vqa7fn@7J%E&Q96WV0L(JxcTpe zg*J#yH~01y8qZER326k8&>v%%Uy=R6Y``@;E2|giTcb!zOiAh8aqJp+d&}VxYGAGl zmo5?CxN+&}-kJ4i1p|~0BOjkuilUw#6+F$SXMNAXW0m=z`N1pigK0xVC&U%s+uE>4 z8_8;2S6X4e)mtmTEGs1O-Cmd7g|UR-(VGU(tyhp$5m8aGrJ@+Y@I0^`gNJ+q`p($c zSkPl506Op*Il0#A$$D@4i?OyxoWS*piV=2`HRZ66Rd$mAgtzJGUuMh3IvrrlfG!wI z$?XAG87M1sZNPAXqv0GH8bV>)qdu-qKu=gsRNwR7U7h(Fh&@s3PDo2j zt5K{Y*^?p!9Q=eOnh5rMA=RJb%m9!;Mo#WKAUSx@!laoyr7J?E)+`?!s>>AL95Q=-b1^I-!KBA;&Z^Vu&@BJ{tW^F z7*8QW9Ad!hL`33JQaGiCjX7W^q4&#-n{gmP^E^4^jgOCqjJrQg3>*GIyV8mjC=&wq zXqb4Gng67Kr2GIN4BaE_+W!|K7WisvY6@6w?F665a>cFdFJwJ%-vHR;OP)n zfqv$(pGpD+&b+NT4MP){n$q366)^hIqVx00;vx)%Ae1Gfd|>l#_zx_5-@t$=RF4%p zGdnvdI+_$B%>~$$1(;re(Y^#w?03A`Mr7&15;`~c)bH%Xz2RuBc4AK=DuzeXA{VU3 zd*w{2d@5-b4XCr+GA=1VTT+_m1^s9}QN}&mNf;LWICC&FH%H#|aQAN^*N@)GN&Oj3 zqvltmPQ)x&SeN~gvjA6bg7#q5C{kK{F$k%mjg1YW6c-tX@|5p@3@;g^tp>q{Ax=$5 z=m4C2{r0V-rsfS8n1EO4f-OKVS%AI*p|AF@Up>(mDp*61>12l~lQ(sWDy#$f1Dm-1 z2Dsph!NEb3^~U7nWN1y1po0dR>!cwP&r3=;KtD9Ya53Fqf9>QVOk%S^$+C3%A8s@2 zR@oSjlo=m%mnl=26=L=`O=0c?YM&Dd|2ps|QU*W`G(Sq{=V=b8sj1(BOa>TG<1e)` z820uX)^aSJj;f0lJz0-EzEYBq;si>%I z?CdZI3#Y(jV&j*lA>zV7GhKK}C|X%wuIxz#b&#XPaeT(tNrJ9vXBQGm223hAE&{a@ zRIt&~*5(XcGCMm90wDvKR7*<>B%HTt`E?<1ah?UrOnE`3LIBzyQa1}zKo0SJ#& ztd~Fa--n1ur^+V3{9AO3nVFg73!JMM!CbT3_wTDT1Sr7KhJ8#YXEe_3MxTQyFvRy^ zmI=(n2kjCW8F`T-jhK`aiOSmB+XstvV*xan=6qqS=IPE557m-hT>KMM1xb~zmR4`E z?!#M0mwJH8WTd4<0V82q`|?#8voZLnSZBwyB=n6z_4_cog!~M|!B=R(JnfHnsRdlp zz`>)6JC&7{p$%^JEFdETSU@02_h}FKe>!j;8T@d>LAs)lsyEzkGZ}mx#6AM4&9tEj`SAQ$VcUw)b!cnXMhqAE9 zV`XKfa55YH*sK9Qry1|9@YEDQB94S#GoyJcBxwGBQewJ5<}hC7rF} zcl7rmBx33%7qQZKB0hHkn%)#}VS;fX+$>WKn-rN{ryC*A4RwYbmH|#cPA4EoV_aN# zAWmh;H6(r+Y64Xz2NP59j3(d@SVA!81^6LS4cOoJ0Hw@RBM|%VpaYlpt_=j%kZa6c z;zpNB(4_-yfweX?mG!|FcNFqJO#%ev26HJWB(#OfsS8k00DFQQ3t(2wd8c@yhn!Y= zsZwP<%mMLj7ZkWi9O|Jc0Gn2|!)*{0rrOvY)DWIyJ^It4xu z;qdK6Wf+X2c%=VL+6ReANWOQ)bHf185azC*kdquR^+Tpu5F)046t)te5>rZq2p9&6 zFN1^sz&JTDP^@7IpNassvK>xc08E?01mA?&6S*YQW5|@hfvbdsx(rSR!HTg!yuS|< zGp+{@%zu9kgu@h80`y``y>RvY-En)wIY9ArI*XbqSp9rF2UFwN*c%Ak!kiZE7ov$= zHg6FsK?|Z+;=6KRA;7=)J?HlB)g4eOIb&cdc$@iHy#mO-6| z7-ZvdFr0?gA98utBr*aVKk~(y(cIj;y1JSRVs8lJq#)+Tk5+6Lz@1+J6A3ky3MLqt z8GG%m$wTgeoJZre8e~GnAYHW)5d|CySsW7EFfqM`I)zbC2jJ#SAjq8Nf$E|nHmI;S zwY84`&Jj5QXx(4qYJKI(mG5e8;`t~Ag}V?nfQNDbQo;hR*8249Is{GH$`xJyH1@7Y z(Sky9TASd9#9Ia?4X{8h?J7tGpI(Qg=hc75=rSSdM9#kf=35FBIUxd;h^PrLwc2Hg z2(&OgBjfv+n4G2FmxOUCDKuazb0JZL6B)=+E(nd(li0!xH_84TGl6auJ>X2c^A9=T zAYc16Qu}{J4n>KbG5c?q;q}c#FKrCDTtgNDS&Kl~V_K7M5_alNfs=4h5lco=L83(5 H==uKvTW8nc diff --git a/sbom/server/non-fips/dynamic/meta.json b/sbom/server/non-fips/dynamic/meta.json index f3d30188c..4d049a136 100644 --- a/sbom/server/non-fips/dynamic/meta.json +++ b/sbom/server/non-fips/dynamic/meta.json @@ -3,8 +3,8 @@ "build": { "variant": "non-fips", "derivation": "kms-server-non-fips-dynamic-openssl", - "output_path": "/nix/store/8mi7a76vbmibc3d868i1yp74mrr8ifc8-cosmian-kms-server-dynamic-rebuild-1-5.15.0", - "timestamp": "2026-02-12T06:14:23Z", + "output_path": "/nix/store/cgbpirvj57n0504anycgkzvkk1m1ks8m-cosmian-kms-server-dynamic-rebuild-1-5.16.0", + "timestamp": "2026-02-15T13:53:03Z", "generator": { "tool": "sbomnix", "version": "1.7.3" diff --git a/sbom/server/non-fips/dynamic/vulns.csv b/sbom/server/non-fips/dynamic/vulns.csv index 75c021a34..78b6ff681 100644 --- a/sbom/server/non-fips/dynamic/vulns.csv +++ b/sbom/server/non-fips/dynamic/vulns.csv @@ -1,12 +1,13 @@ "vuln_id","url","package","version_local","severity","grype","osv","vulnix","sum","sortcol" +"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770854400" "RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770768000" "USN-6409-1","https://osv.dev/USN-6409-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-1","https://osv.dev/USN-6541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-2","https://osv.dev/USN-6541-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" @@ -18,7 +19,6 @@ "USN-7634-1","https://osv.dev/USN-7634-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-7760-1","https://osv.dev/USN-7760-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-8005-1","https://osv.dev/USN-8005-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770595200" "CGA-4r5h-8hvp-w6xm","https://osv.dev/CGA-4r5h-8hvp-w6xm","openssl","3.6.0","","0","1","0","1","2026A1770249600" "CGA-9vjv-2q8r-rw73","https://osv.dev/CGA-9vjv-2q8r-rw73","openssl","3.6.0","","0","1","0","1","2026A1770249600" "RLSA-2021:1024","https://osv.dev/RLSA-2021:1024","openssl","3.6.0","","0","1","0","1","2026A1770249600" diff --git a/sbom/server/non-fips/static/bom.cdx.json b/sbom/server/non-fips/static/bom.cdx.json index 223b45476..6e8322feb 100644 --- a/sbom/server/non-fips/static/bom.cdx.json +++ b/sbom/server/non-fips/static/bom.cdx.json @@ -2,9 +2,9 @@ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, - "serialNumber": "urn:uuid:d29ed88a-a46d-48b8-beed-4c6253c3a6ce", + "serialNumber": "urn:uuid:b08800e9-7564-47f3-8841-8bcacda39e30", "metadata": { - "timestamp": "2026-02-12T07:13:45.582310+01:00", + "timestamp": "2026-02-15T14:46:19.913752+01:00", "properties": [ { "name": "sbom_type", @@ -20,19 +20,19 @@ ], "component": { "type": "library", - "bom-ref": "/nix/store/1v6ax8ln7k23p3l5yvkgnvd8bbsxk3kd-cosmian-kms-server-rebuild-1-5.15.0.drv", + "bom-ref": "/nix/store/s6sbjgh5dq4zql852jrp2k0c5rnl90jj-cosmian-kms-server-rebuild-1-5.16.0.drv", "name": "cosmian-kms-server-rebuild-1", - "version": "5.15.0", - "purl": "pkg:nix/cosmian-kms-server-rebuild-1@5.15.0", - "cpe": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.15.0:*:*:*:*:*:*:*", + "version": "5.16.0", + "purl": "pkg:nix/cosmian-kms-server-rebuild-1@5.16.0", + "cpe": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.16.0:*:*:*:*:*:*:*", "properties": [ { "name": "nix:output_path", - "value": "/nix/store/8402d5q3sdzdhqahpicyad4g8iin63si-cosmian-kms-server-rebuild-1-5.15.0" + "value": "/nix/store/i6p0g1sab5lvclvvp1a1vi8ji4z371z6-cosmian-kms-server-rebuild-1-5.16.0" }, { "name": "nix:drv_path", - "value": "/nix/store/1v6ax8ln7k23p3l5yvkgnvd8bbsxk3kd-cosmian-kms-server-rebuild-1-5.15.0.drv" + "value": "/nix/store/s6sbjgh5dq4zql852jrp2k0c5rnl90jj-cosmian-kms-server-rebuild-1-5.16.0.drv" } ] } @@ -113,7 +113,7 @@ ], "dependencies": [ { - "ref": "/nix/store/1v6ax8ln7k23p3l5yvkgnvd8bbsxk3kd-cosmian-kms-server-rebuild-1-5.15.0.drv", + "ref": "/nix/store/s6sbjgh5dq4zql852jrp2k0c5rnl90jj-cosmian-kms-server-rebuild-1-5.16.0.drv", "dependsOn": [ "/nix/store/gclfapdylmsmw25fg4rb8kji5gfqwdp2-openssl-3.6.0.drv" ] diff --git a/sbom/server/non-fips/static/bom.spdx.json b/sbom/server/non-fips/static/bom.spdx.json index 01a1b0d35..f794bbb93 100644 --- a/sbom/server/non-fips/static/bom.spdx.json +++ b/sbom/server/non-fips/static/bom.spdx.json @@ -2,10 +2,10 @@ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", - "name": "SPDXRef-nix-store-1v6ax8ln7k23p3l5yvkgnvd8bbsxk3kd-cosmian-kms-server-rebuild-1-5.15.0.drv", - "documentNamespace": "sbomnix://3c17643f-59d9-4655-97b6-2070d4bac08b", + "name": "SPDXRef-nix-store-s6sbjgh5dq4zql852jrp2k0c5rnl90jj-cosmian-kms-server-rebuild-1-5.16.0.drv", + "documentNamespace": "sbomnix://0253040a-2874-4472-82d4-fd92c782683b", "creationInfo": { - "created": "2026-02-12T07:13:46.330095+01:00", + "created": "2026-02-15T14:46:20.698788+01:00", "creators": [ "Tool: sbomnix-1.7.3" ] @@ -14,8 +14,8 @@ "packages": [ { "name": "cosmian-kms-server-rebuild-1", - "SPDXID": "SPDXRef-nix-store-1v6ax8ln7k23p3l5yvkgnvd8bbsxk3kd-cosmian-kms-server-rebuild-1-5.15.0.drv", - "versionInfo": "5.15.0", + "SPDXID": "SPDXRef-nix-store-s6sbjgh5dq4zql852jrp2k0c5rnl90jj-cosmian-kms-server-rebuild-1-5.16.0.drv", + "versionInfo": "5.16.0", "downloadLocation": "NOASSERTION", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", @@ -24,12 +24,12 @@ { "referenceCategory": "SECURITY", "referenceType": "cpe23Type", - "referenceLocator": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.15.0:*:*:*:*:*:*:*" + "referenceLocator": "cpe:2.3:a:cosmian-kms-server-rebuild-1:cosmian-kms-server-rebuild-1:5.16.0:*:*:*:*:*:*:*" }, { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:nix/cosmian-kms-server-rebuild-1@5.15.0" + "referenceLocator": "pkg:nix/cosmian-kms-server-rebuild-1@5.16.0" } ] }, @@ -120,7 +120,7 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-nix-store-1v6ax8ln7k23p3l5yvkgnvd8bbsxk3kd-cosmian-kms-server-rebuild-1-5.15.0.drv", + "spdxElementId": "SPDXRef-nix-store-s6sbjgh5dq4zql852jrp2k0c5rnl90jj-cosmian-kms-server-rebuild-1-5.16.0.drv", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-nix-store-gclfapdylmsmw25fg4rb8kji5gfqwdp2-openssl-3.6.0.drv" }, diff --git a/sbom/server/non-fips/static/graph.png b/sbom/server/non-fips/static/graph.png index 563e02c677fb27c77fd46d28e181812856b005fb..fcfa8eb3fbe312093ea8c3b08cfd7160f075e428 100644 GIT binary patch literal 10125 zcmZvCcRbeX|G!EJB@sfR?3<9xtV6c!m6hy~y&|hL?7eqZ_RQYdTUIvNBYVVc{$B6T z_ut<+9w#U6`@Y`S^?E(m>+)5QlempThJ%5Daa&4KR0#v)st4P_t?i(68^ZM zFC!s}af$ro_IIbn0!RXbqq@_1L>_W_sIT}r*glAH0(-^DU$^7gsY zQ)Ojj>H;c>u9?s}0 zKzZj*aQoD#`}B6~R;)|EqweVG@6b*|c1&S>ZTX+rNaDJ_}>5hAi@Vz z@qfP{tdOd%Mqy-PVt=@w;mCyiHpWPi?HnAW8+Aub;AM)SPq!P!ON?-_@E-hW3nZVwlQ@pfR!qC$*P6k)@>^^%o~^`2_^TL>O**?Xd2j9KOY)c;51E*1dhY=3Ol3TjE)_ zec4!@nH=UM0oS$!Ui+P+qfGbHf6T9nFv!WtExl>ax&_>h@jX2~f9GpSbVoheJvw6D za>;h_VhHbyd1itq6UF?qw>Qvbe_2moU#X7!WgPY%w_WvZ^$-^^67rJ<#LYSQ;0h=Q+eeI$4H-@o6^>VX6; zd3nrJ)6>{^c*d=MM3vRmQ7rmM?IhZv_l%~drm}QuxZvc|;iD(;vb7ThT%&$|!ZI*5 zm3;H&Ps0U4je;#yTokKr-+ZfoEWZmolUm-dMemmb*!oshEPZ`_4}?4tW<4(x3v_Ct zbcUf8oA{_XIf>NO)!EtEeSCdWtfs4xcW!BKA1ZsR{@iJ!W4Sl}DI41_CrK}bbl9f3 z&CT8xU&7t}eWo0j0qpsW@gMNL!O_;V{_8JL+X`9j!IVQa@2tr5kUs`EENUvqs71 zNG5f^MFpr=hOpw|r&q3A(XO)lQdoZ?JvkRq6-q4;78xn_=FK-ryf4xwJAZ!mB=Cka zDu1`xnyM0+BEJJ;;JpL}^HF`05xBsPY_jG)4LmX3x-bknH}dw!K{HP)rv9Pd$D1{1~;-$UrlaRCn zFdVO@1$POsAw@oItgr8toz19TpgrKkKG7j@0664RUQ8xefe>vKlvJh zV0*zYk%g{|KiMo0*2&t-@l`UgoK36X%fL% z>V*$CCo5QYi3YvzP!c?RC?_qA15euA)s-`L^q{}9^ASIPLS-e7`R_d6x;lX;nxzbi z{6;B&Xc&fuhFKQMq{0!=VtE^!xut6dYeSfrn5LXxhlf>Y2(W{Kg6@-(het%Dk2qs) zzSmlLabe$3+3tRE#!KM)8R>2d3vI)U%UUI6Wm0ad2afB*KYetb^~0q9I}}K%;^5{*{Gb zp|-(6rQPefx1T?Me$Q5Y6i1dW+;>~_i7S*aeE2miJkw!8I=UMGizf$b&Er2zTuu%c zPmi|S`}%@XUU=^*~T`Wn~RKm6Vc7fl7LrESQM! z6(Qk^3aja3C?0y(e;^R6t$1Ynrsq(Y)gx%AbOE7|D64}-}B;AaPS@ZWWl8~ z^uDIAa2C(ZZ*<7z6zi7l+mW0v@G}n&kFT{22;e*OpWS+%vb_c=`Q0Zo{8?L+9z z(7>35Q}Zr6f3AGGal5Il?FPX4!NH6hhv(slIs!y+TEH~^{8px>4ED=CdVLAJuuh5( zq|c1sSX&4C`{UBfC#3_?kO>99Ydt?bddkk8YCe)PfhWfB5z20Eb+rRZh+~GHiz^BM ze|J>Za{x%Kb>ZUTq9>6r8qTH|2r}?w@9@wFiUku3i)orj@^NU9Uh|E>laAir*6Hd0 z?F$i+SmJX>jMd-yIy6Mh z!Ex`|vu8ll>N)lA|7~=pONGyv^8>I8kdl%DGo!*@e5iK(TVmKr0D${_z}EA44$FMB zAphPa&~rQddJLB(*~gC`-TsZ6w0ep}PW{`Q)Tp$1#KOV?tfOyf8CXy-fwFGmOMT&u z$E;JW!pMthTf)wNOC7f+$Hv|m8~^(qtQ9if5*{1d z36xw^Uf%ZWmx9qLVDj2G$jE!xqoCN(a8yb|NDd0D+)QGBV8;40*SKmTmxwm zcM!4(AbnP8Gv`&_Owc9O9z;PZ=vLXa07?aeY?hXVjV%PE2BI$_Ef4>Wnsh}lk{$l= zy!80fOXODzDyF!sjFy%*qe*8oH-y>;l*}-lZ+f>Ny*yh%)TRb*@Fn~8Ql{4kw z;cq)X^QNMq`5euvi(3A-7)b9agr+Z&&QR)0p9v60Ebu(g&eHR)U8i;;MPp3IJI4~V8py1--^3&B@ zf8BpH;~HF4#I`k4CjeZ{2?x$QBoaVy{Cu|J<26sr= zKLciE^B2x9k1(FElhV8mM)# ze}A~1vFr63eX2Y?LWDMmX3@z}DC1(9x~XqyNJC6a?6%*_O+!x)TIh0T`rWLal~o^f z@NjvJ<6mN5U*DHW{G>86G8wvGfZyEqI_Zy(k3$j?dH|SW1zfq{4L*PUilR6LIVMR% z;IujMB|4f!N=iypT$~+>-ncKJ6B_S65D2&R3=QnGp!*4fyT=n!?vNEsO$mza;B^bHKU z&(I_*hiaKTr^!6FULap~HY;ZBj<$5>7Z!GRb{hNo=syMW#TV!bv>7PUXI4`PW~(M$ zZcW#OO42MYFQWuJ&W>$?M(cJ96p(K4I3JGEcGikw z(dmMU>klO7mXwriY;X4l)MFCI=+YDsxw^AFRZ&u+4-CTZaTfFE&l~upST?<@yu7?( z|EO81frj%+K%`;4c=6()z5qY0VUuK=VyO;;ePenwY7;dCIVm43~Qh> z_-tPvAF3x$0zZ7fc<#8~0w}JcuTf=33ry1r^0l$?Kd^}XKtM$$B}z0(cHlnR;r*#4 zfMMa4mTtp5GG4^=j|u@RtxT7nXA zJ3kzC*cb~1oH85k2d6YJG?WHqgqmE8PGHhx%);UHiiwE$93M{(+egRDeCyh^Ykztd z`#@aU?=4D!6(iat<1`n2^(tomx+m~1VjRi20^ki53ttPIou5|$Yba%_JeB6~yl{I! zK~d$fMgWFFOjnl@{(&8A2M6FA5MX$Daqf4QiJqRG%W|Tn&h==l!a7-B<-7H4Juu2s zvq74J!$Z}R&cDF%qN1WUe;Ti}nkKxYGdMfmbwe*jJ8aJ+iU*QqA3*bg=`7M$DFs(! zF;?^u*mb{?KKb4$r<}YzJqqQ=Yro89J1^S0K*8t4e7KLr@xBf>ZS4a3Cg1@tfwHo4 zQ*$#>8lSEQn)dha-vJK=;-Cw1YLh_J&~k97JXLIf^Ke-G^%3zr4W6EG9^Vgsa@Z|O zI&F;og!8p^bbPXJK*FJ)vQ{707N)DBat{=wT7o(#{}g~mXJ==d`4(*0xX++!fIby8 z&vP;}z2ScVpBA8-ueas;US1qEAnq2h`7Rk*4nsvqOw6kdqGqF35H?IqObE6(Z*+#! z-y-Ai0nbGMzcjEkGao{dbsGmqe|Nq$fKupnvE@&%>v^y1;^4ReY-aCG1fLCR2>UCP z*6}RC_M?PKXQKQ`Sc$9sG?PBaWGE3o(L{W+1n6S)#*hB{&mC4Lag_5lei#?qugIz8 zz53|w?LEH>^vATE0F9t-_Nd*Lke3Ap|%vKVIv ze@^5s4^M>NUm2=)d<)fJYh%;+^XErEQ`_BnvG4N9eVNG~IE@jE%BHjR0-*QcSSg(C z<-l^pfF3F~9e6C(@bl+S>3-oMCnI4fA`t88N{n-Ja}HZm8b+wE&jHb)5edo2qzw(z z^~ro-Q-K-bWWxX-vd{IR)Ya6~KDLK9aQ`SN@k8fzseh5i=eC-XG&ZJNXb)DW@!nY` zI|m6$)KI!#-W?wp9}}|!ME3(e+vEID-ObGnR2(fgcQovpzP0t8|G-pe6ulAt7|oxU zm>5~^4n`>f5b?^j8w@%nKT1m%dt#pf$dm9mu&S4ts}i$lXG!AC^%lP8=H~YD^5U^u z^cf^qv1;+TD;?ca-F{ZV|Z*I*Voq{K#erM zlG#7wbg#qp(-=DEwix?QO^tYFW=1;tB97a-56mex4$fmbI&mY;95}H-5~CT{T&Jz6 zSe+WDr|-73U%q_#fji9`s$N=`z{uS~_QK=(<|$N21Va>THDjVWrRUjG*g7B+yORU6 zYNt(Umr2Nq02|$QTS@#D@n^KH)8&6hUkoY<5X9N3D6lV=#Ez&*99)hk;Ez_1V5ib zH@xOshao$d@m~W2kDzOzjqO)|J$ha1yi5F8<#2U?+T-&49Z0|rH8nMZqvsei=3dr`uEMn^8rd?;;#_+fSrBB##Yo}&@r0~U9T8N&D=0t54r^o+)q0|ElvD( z$&Vi+R#1kVIy-yiDp{C{fr8Lme7)gmZGgQm~e0FWUeA&pSZoxQzFVD>Tm zF88~2>vTQ5h$~h%fB?~JnaLrYhGKmgsNQ|n&cBJ#-%q=(Cl7%s_y7F7mLUk5|5{^} z{fY`fT9emo9E>PhsBt}TKBhacUWYD zvO5hYp`>g;^?bcW>IK>q01t(&tJpqFLoBPi?WNDMH7ld@61sJ4Z0uKo4qv3@m%zqb z_t`#tmyIuR**Ati+5nDuZRbA^&in82l+$@Oq!QB-aT7cGtNSU_G!(H;%qzX)ckGuK zl3EgDloDEUxpoEpI0B4G8fePCxM0!m>GC^MJCbs|VS-Yj;60^qC15E#XI z&@T&d@AZ?iZ zM84TW*~*y&vS_wv&!{0+LH0G4DlR_W{`8+^*>?ZD8w&_iWRt;gNLM{T-^N_rp7TqE zU53RaJa@#&R>^T-B>n?n3-Rt(@Y9SFt?li(rQz~ZAR+`XJkNHqEGJ4+z&t`o_|$3R z72=S9a3O~UjawhNQVtNWq@)DOgA#Vquf0&aswwJ;R@eEl(8V!zZ#=gNffQBSWYEw<;OBUE0m+~t%#_Sf zf<)K(^86@rBC@?$CMUfZ{FaPSy5KgBBrkf^7D{OF0Xcfr&@3iCo@r(qEx{Zf9xgNO zX`7LeQ4E*~Bw4Wc@pAU^g5-EsQeUH_sHkyxI3k|g8j{frhge2x>Q6QAwv|ABwU&B& zm6{G*wYRsIOBR%Maw;Drc`GW4iSY^R4$J;A6Sa$yskwO=C?o3^l}i`5w_zxulp#%oNFS%tt)01Mi2RF0uTdXu z&zj8EyF0tM3{+U_p8VVFZu)`?>9`mqAeNI{kl1iosS|*H%7A__m$+E;KiX3(WRL{4 zeiIj$nuSF!V>s}vq?&)0p$A44V?RvpfS{9JiF-*$&CU+uZ0K?LNJYL#zW%?xy;Kl< zXJ`BU(nr_bz+yf#?olutcbV*@cW#asLp5BSFu^>*5ABAWJk*ow^C0NMvbUowLy94( z9juDWLf_riPABz^j9N>Kx+@{Ihz;ymRGk>r8al75t7NRxE~6h*%72ZezoLc0it>jXu4Rxay=*nv|FBuTy3 zHZ+7-*x!Y^g_T&fwU>LEPqkxUazV`cI?s-&5WaJBcPA2}+M585CGbsGSuy};iIfc_ z3F;cW)u5n&4UhM_StG-Kdj;_USV1ZpDXjtWDuDCt?_a56{_HxWn&TZSF0nB&h{OfK zP-(w{m#dba6VmypwyKube3$_uMKn0Ii1K_eOAwGg(`&+vq&xwetyV3t0G&y+66KbZ z3m^w+j&_ZctdW(eogI5Py*$fqsxKTHq8>5^EC7wg)|k*H!QVHf_5c3PKig@(gG$R* zR8;)@<%?p2hkHh34_G*`c^T%6JI3|z_LqCdYh9i}iKz1@g@vWYP{viv=nJ1Clnf&g z1PL$MgQINK7;^5DJML1dk$M{*NzCw^b*` z0rX(_0NZmD8yi$%^0#kPVwOL_F#dorEG#VS_;?}sBR8$xBIPYRP?dhJ8Cw%&{@@hF zgC2D5Ep-!BoZ;NONyW=cYGPu7oP%{^zE%Zlxi??CN@>@q8fvCMx1sMdHen2}J>9^- z0ASuTn?L`7{6O$XU&9qZ4Z>5iq3^{&@@2&qv-LVp32ZjTo|cr99IxjV4%bKR4N$u< z!~SN%z=4OC*A}cY8J9%|tdfXxpZ(c0ne(&hsVNSRI^5K?3qUDaHa2|37Ut#I*w}mn z8_?3y5)u~H1cQZpQZ5$_n?TPtj*d&8?g%RIdO*OkdvIWg-dlqA&Q9!Be%; zNXy9?i9Adnmdouz@I;JV#vIl&2~V`j8E7AaHqnC}2d9t(=zPUm?L8jELEt~dvgu$e z%2w(DeFkm8vde=>CgruGfrutgp_U%KrnUo^dJh??PM);W2P=1vS-_iGxTHn z4-IbUFd`;3jLUfX`}p|(0r0?UZ$02C>KL8u=o6Fv^6KS~}X=pS&Mh4+*Yd^JpQR223jecn14}hK^7r81f1_1x>Tpd`GCr zW=@1fr&<*9BOZrU{GIQ^-sS4-Z~aqJ9>L?n5brjKC!8ZO?HF2_C+bFjYTp;MXnA@0!Qau~sVQv;X+DRB-h~5K zjvLig5CV=q`!{KgED|&hNDC2&BjKDEAmu8ssTjZZD|9J-u?VVPJm7wcQ|kWY-h3-= zhR8VJpE7eYYnIN8$T(UEGg-(}4ooh%s6RmXpj<*gFf*Pjo}ZmXc;s`K4@-tpEhW1C z%F}oz<`r?2@ph`R__1(LH#`D1AsvQwm%;-L zUSJSx!Jxx*R0YRqB{C^V4(0_A!9j-l+2j1=E(Jv|WI7+X{i7GL^aGJ8(Xb7o_jnE-i}vN)~kYgNlVI5?SN{ z1FM{zoEx|WO|5h#P53+5|Dwi*wMl$R%0h++olH3j=&_WNn7?a7nH+C_2S9l9!)a3! z3CY0BhJGm_Bp?9g4jzdfve0A%A`YL((k4&|d+L>CHa0roYVffnmt>-dY zjl;#6W2b=1xy3+KZi-n%d4Z6ucY{g}SHbgZmp*EnWT zEzqBk?Z5V+yMIQoAdHwt`K33qX zW`AO+fN=_f9FVznod?0K2+R~VIO{Zo^y=nY#1sUg%l4h4P`%tM6!wd?d z?O2#c8tCbz6!@B_Y}A5QlmUo@A%|vu6Dx9)gyoq@-y%e)G=hQ;A%sV!_7L>|^cX-{ z`0*KHix}-g3;+=)DZ8Q1p!?*$;**HP(TTFRRlpN~{;47SO2|RqLy`g{R)j!xCKhsw zsR9Q`#o+G8hn*c8OK<9%tx<`Iy(Y=-;xMv9!|VmeQp?oK)Yw>DK>;6`e2$J*y!?br z>}Lc*Lqn0#rgg(PF^p4SQOl5Ge1XYfQc{w3gNM%K+)b}GI2rJ{)G#E3OgSJh5Z6+7 zv4kB4;T|Vz^q?;;XjTPy^g8qYB4!EGKxU8mpzI?fU?Z&M? zU`{9Sr11R?0D3_Ob;Gm_l6jMlxXOEjSz8|<@dsaFF;h$W?%ffNXZItdKQ_Vl8^OgM zHyF`?7T<;OTuNG6+GbH#Ao$~yloS|c%`Gmr0J4@*gi+mFMUV$#L?54^H z3r#8o1qI0E5nK|MHz1OsC|YVop&UIydGsOt2f|qB{D2SyW-4^r1YYjcNS;PGsIU5y zbtXFbq#kevkUvl0$>85ZG8C}AkiMm7X4=Dz2jD@@nTA)9GEn!@;NbzrUdFP2fu-yN z_U(Zz)5l^#3PBEnftZ;4aBboRtPJ$`JY00y7OiWZhipg>7#SieBtbyJdqMZ-K;$D% zrcDiFP+y4BMec$Oq>3R~Dm(}>S|iR)7U`b4w+tWA6VDwCBX0!=WT24Dz$o4(=W1ze z{6?dLT=XDPfmks3p}=D}%8m|6AobO$s%J1`2kMZToHNsb2^(-P($B}o&YGpB!jPLH zH<_T{QdJTZ3X=F;L_j?QhCYTn6BwYWApetu;*c3MnsdbGv;}+nZ+o^MQt&D_G&{VS zT0o$VHPRm literal 9778 zcmXY11y~eq*Tw=t1Vj;OM5G&~5eey%ZbVwT8x%=Vkk~~@K}xzi6v+kY?(UM1hX3sQ z{m7*&?9M#%%sF?R2~}2GjF~&4xNT=loMHX8A7-bs$29dM;_5MK@b8VZ*bNlN0CFz8m`b`YyqHl9hg!&;I`XYhq@$ zJJ)>6CHT?6YrBSX9#-A*H1S|O3rlsyH<~FrT-@A$_x6l0FU}JLTt1wgoylU$!UD3Y zs-0IG+ae!1I5~ayIsLbWmnnI?UeGX7?;{wDM={s(iEIr|>L}K-=i3z|68Vur5a}@A z(pzZs+i^JkWs-I$KR>^_msiQ_W}GKapOWxcKNuPs`Vtq{SL@+4<++~ch(!w*Js{-a z;UVO{^A@g$@Xj4kWn}`lt%+Y#Q%OY38a>r6RxZI=8kz+Lrc0e)$pu|M;!y~2cpurH z9BwPMhEw$R_kTC2^IXGwnblleQX-?EusGKo77!SChm=(IyW}UWT6a!LO3KAmb$Lc7 zf7lLRv#tagGc!6vp93OWTU(lk_pXZ`#d;j95lMxU&(>_$&u>lEc%L5(d++_>MYwvc zEBxJGRbA>%jwmQ#r=z1|F{pju_c0&5}-{#+g1J-qyAD;dU zkQ8W!Hn?Ch_B zAF5D$jCt;>*mJcWdpm#s8f{P2z19mvA23xag3`#!N^WoI55Mmj-`Lm~98g8rb3f#n z&q+_AkvJaJGx_(Jw+ASqsIxYHzPsjqvYL5xa>8Ybii!GwJj<$^_Pb16?1(Kf`$HN@ zjswk+-ZwnlIz64tteL;F7;Bg|2nu^|teb>+$x8vc7zd{7XtwOLVk&reY!oFR%Ie$$>gy7J6}lH!v~hW@kmMtyv~(+%(6?4U$Hx*5nBB+a?&SU|C-ctE&Ygn;bvHhL<%h%h`o9|+{h>E!*4DCfLw0pL zzkdCCbacdF-bMbuD>ThWN%_^6F30b4@&wBDr5hhnxyPOvRBUTw;H^Q557cT}&=d|1 z4o0($fwi6ovX&(2*s00MRB>@}l~q;hmTzI7#5PUeyg|Laa_wl_?=ojgnQ3D=+0Sfa zr08r}e4T^etITqPz+`1*rI^5%;+!nz|A30B8~VuO^87GIhyx9B zuG}0P-(G~>*Q;`TF_{uG4i&K4mwwA-ZQ#F^|CsW-^ife&ZSU&R7|HxhJyqvL{1(Zo ztKnmUzVf``)EBo#-8$kKSXmXk>2b-%9Hw zKatk;8WT7`$DLnVH6tdHC}3@?A^+md{B^;jyvAJUl!r>+8``QK>`j*AKGu*Hc!? z42N8kg}s8{w@}z(hK3CTh>KftN=oLt3++!V`>y-=_;e-kt1cbIvgv=QudnaBWMN@J zscCA@{pfV%wVen_NqLx`pU z-}zR6D7gBdnwlDvOImt5r~S-xv+krn=ck9EfFgF&^=C)(5vCu~xnv5gOt+N+DJ4?o z0FV?N9l5A{k5a~bNzgU|Qyq)ljbN{Ev^W;$mWGOogg6|Fu>- z%SHcGM@J_hAmEj?b>~8RG_%?;VBuFD8=bONRg%q%o!|IRY$vqxlPab>!{A7qRzoaT zuU}Sy~2Gqg=npmA~5Q&SE)%3XgCe(Jax(JB5YJuPs8vn1Kps3B)?i&T|GBH|GU_*cWN zpU|}XtK${yU0q#kc;W=viPiZ&P$C~ceafkuoXdKYw6I_TTgJi7Ev~DpYda0NgTXXV za+1-})nx|zg!_QwEu5DdK#onX^4nHn08?L`ms?9XMNXkGJw4X*#muG~*RSvFF3JVr zQ{@+S_w;-w;Wo=s>;Cl~>)o&$4o?5TKobCGX=y2`TSbB7KkB8$MTfH^hp4D1v?7v} zl-%E*HhiecuBQm49Zn(m+S2leJ(;Kg!xMh~uf*&IJ!Mv!&>1~Y$Af4((LOFRZcY9E z{dbCZu=~Fa5@4loP^&-JIj{fv^{dwXuNY5xroGUMbw+`=PdPawM@F>z`ujPbJTd9{ zChA!6`9s(us3swg-GIX>FMKkxc*lrfkKKjPMkfgy8yi5*yq)z}rcLkI43^gAr6tFW z5l$d_IDM+saQ>J0_zvGdM!{sex`X>bDid{HvHt#7L8F1ziAJES1rHAoGYos z2I&(E>O&)C5*ui`IM7B6wfV)Ax;iYViE5WHkNX=xb{6ch!YiHy7hAf~ZeneBYCZ<()G)d&s4 z$;H)(LS^evk}F5Lvg=o0|MrB_1{UP9KD4;I*nuG3j+c;=3xh4iD6r!%(5=9uqN36% zw{AcBI}ajK^~4~Tk?`)_&<`JIxVfW&WI)M;M@B|k`}KyB!xBNaMJ6Q30}+$(*;4}n zY3jHEUIIVU2nv#ki;DxqSoEd_T3-UTn9je`Ewy+T7Iy2-ojZEf&e+hfEUc_Vo@*FD z0LOdXBJFK$-(bIp*fdE%qlIK-WS~MPf2d|+tPK3P3v~O4hQ@zlLT{|xrsJFFd$pt< zW*!LtrO#=flcJ;?W0|ROo$IDdpr(1#oZd;uoe-X$UKmuR` z`Q&GbX!ty5l9!X4|BWxw1osNw&&9>{h1ZS}&I~QwR_3!c!CzZjJ5pkfzqPfMmX=09 zLedWX^;OV~&B(||K1t|nJg*%gDJg2^*ZakKmarkG`Ig(G<*=bUewT-SS~@y}6cm5H zOGS)SyD-C1H>T=pMg&~9r~U+B-<6h^UjP}vCm?`|irq!Ew;OGal{GattDmg1cN}X# zu_X(6L_y>K-K>~)JlxVJBqX$VacS=BQ$Y?8`PjgzTYmj|S6RttJ6-=NA_9N7z>uDW z1(%(j-FB+>2SGnb*_*hyxy9vjsi-2;&=+ff`acH;5ou|(aHuar9$WzIn(pUbhg;3S z7*MrUn;<2B!fT)jhEEkcWrk6Sf^K~!=1M%)BhNiO1wgGBuk@tI#_DCUF>B<`oNhNP z!^YA+emuLn3LFudi}fv|oLOH|5`?xJD0YO4xobf_#$VY3kx}*b&lsFM9`YVX}JsG6`t=*(+aIXBIM2i>!N-1 z=>6Nb7$^Iy?_*XP^!6x4F(U9PpyUuja%`AgoJM1yh#lo zE3+DY4PHVnElnd&=LHCuo40Pww@1@UNJ{pBN(|g)SMN}lc>Wy2X{qxUKvYwc#Hb08 zIxQVtYF^$Sw`reX5ZiE(6O|6{3+hikfRJ;7ZbPh9c^$F=?xUgID0v_0q@atFEqOql zk(M^Iupj}b2_W)9N(#$exY7xP8`w4+e0+TEDp&>>A11-s!|mx-fHO|x7JE2g+*7L{ zurIuJQ?#6%FNfqxEqZCJt*tAaR|&;~a7A@>$&{3ophen3@6v~S{I~$sS4_z)C@5HN zJBh0EI^?sTd7G3~7U@GJ>xw*OdT_U39v*W$50xsFsP%@LuXD3$> zU2ZaJ!p|N*z5#F0DYX!FcdyKiT?}Kd|K@jjA^(Nr9bg(`LO0yVJA{NZWLeYTqN-ii zTc9T%fWrj-jy`?m=;~?){oR=)OeQ7ODr;9$NqI{>Lj5T+6~6d9_p>&t0N3Sc)bwXZVUhPTPZy@Iq!eQKkD=#k(_ACXK@pFCqt7!+4(__~J z$)?Yg!;6+NPqTFLxh$-#j9K=;*@YBHRiw6BAl!&7bQ| z=78xXCEP_tMY4Whh>-E|y4GHOhh|{5NetBovtMG*fgW!Ibb@LrULY`-{%%-maYsf* z24@k+d>#`M6YccSYRb^}_y*J^2qy*xh8fs5Ep6>9$`!Wy_t_2fHdvLsyu7M>sJwTs z&?_aG9PP|HR&014tTn@RK@7lJzHX2WSO@Ay0!iMuZg>D1>pCVT;r;t`hnNU390?Pw zdteVrz(4^fnc7_di?!=(Da7-b&NYSNxHLC4ak#9h)z;Mk8NDhh(pWgi@vILE(;l3M zMnc<42o@YGX3+Ej<{gj``dZRRBP%B-XM)&t);tH~Wwfx@zrt6)uHxe2z8$U$W@Kb^ zG$ce!mNWS^%!QvX#oM8XIzZMf=I4L{#{k^~%9Gz|3D@UjKPB5{x<2vj%=_8t2Di53 z%>ug$Tnd302x8h1ng;^x3Ni-_a`G-NF3?qYAmhOtgDOLERcObdEHpiH4M{F zhGHTLk^#sy7IO;fQ+>}*ihba6V%DE$sb=E!XDZRt(gysA=jFB@;h=ox9n#Ps0(TF3 zR5X7J6xz)4axj1n=w`>$I361&IlS2emQ%MWkKllS>!and?1rf+DWX8{5EB(!IRUu1 zdwL?P^c*gLuNoU07s?sQ%2kh~{46XO!o$PC@CCko`&MQAv+uG(0^duxsh758pfSRK z{`{#z|NW^&&)eEsq4d+VZ3T7uTD4eG1hs5yD}!7)+7gb=A^RM+>kgB|_*Z!>zk*Y{ z1J<&Y%1^$+cCxUzxUsVnS5B_uwckr(O0O%Ir!%b8`X_<8sH=t0gY%#z=s_z0&ru3{ zN{EVH0kpdI`Me=3HRn){y{DK>pvGxg(f4GPo|aJNhjAR!?n#GJ{Vml4_f_K>^yO?# zH?V8A0`*~peEOs={ZUqD!*#6G5-fQUlpn}ntXf4nI;AANMVr`+O5+Z)4nTz*Z&HCK}SUU(9nJGUt;3o{C*cgP&+I|we|JS;D*b#{*%4i3vw4RW(yIJ zjI1muJl$EI66X~u1>KKzl8-~O+0wFQ`B!Q2u3fwKZ+luvMTHO=omNPQ9HfA=voi!I zh??|A>J#jLJ_rTxf&S#<=l{FVeixDo$qppzqG!{G(;1a?1$E4E11O%m^oksw`xbh7 zdSJ~prH^E-R1sQg!qd&odP5Dd#a}xA{Nd!~&4e}KoXW;ca6`yA<#VVH!B$JIc1c@X z+YB_SV>Ekqs*U=EZ@PjklNAe!t{}!V@+_*}qC-~O3uO?I{T?N!n&dfffbp)l)auO} zoNvye8z2O==N`4?=vJ_?8`h`k*SPWt3eL~XsTd;}R1XA;Rt{b|ciPLCA|_?P%fvjk z0AP>u63MQ{4Fe!GZu$67NGM@t#e&CXEFd$J{*mOzSN$0Z#p8L|NYxBbCyS)JM%LEy z?(Td*ddyEnHzumME9|D1fSz$qQ70Gju)F;H+D296tJkilZO_J~!uEoCOnBxK2a=>p zw+O?$J82QTsC+z+f(F~ehoUJ7&NKC)q1YIZ;s_=RxTLCPDn1}1;|6lunyTvn5Bhg! zhnkbKNXK9t0x20#z3?-%cPTf7y+%uSk5iG0qenL5<;~sQ5ih?>a{8XRhm-Tuxap>H zsqK5`c-H>-!Pwi|tEH>U?YJOaC6FZS)dKe}=3f*dO)*hG{wr5tLBj*{F@ zP&x#k!N5d}n|Xqs`waM$LJXR%(vp&xSa{?=A)9z89>ihNMu23|_J^nd0)nICg2lAU^l zo10sv(eEJO8>WxzJG;BDLBubv}f;SV?7RRM-h-<61o0whdHPj3cGXwv;QcF1s$I|$L<*=aIbY>E@H zi|Xub8XwpFcP+ILDrOQZ%J7a=vk z^F5ly3Y;3q%3=W2gGeAIzC9r(CIFnp#2dyP&sw+fa+}d|8!{3SlHyIU+r@uV0*7^3 z@{?dkdm;CL9;fBSZGx65EqwySp!xlNdl2c+dkYhjCaA%qjgsyah;e{b2XZtcW@cXL zl)Y&_oc1eF?wXh&hlFK!Zx3QyNnPD|@bsf&{!mWF$GeMQHg|quQDGFswnh4KNFN^^ zwIv~{&ATZfxo`lvJeaLsEaiKAdKw)U_W@kV)YMcl?+k<`Ci6=}x!R9TxhBE2f+Ji8 zGBk$}9Wrl#utrcmXu$v;xY%+Ny4l^s1D!z)<>_WVK?32SJggk*Hq0#E*3<}s z$_Ak5hphDV>(|n9a>m_B!o_K|E7PzO_obwyraYD@0{@ZmSck;NljUgSHFk9=u4*M^ zzo}tR4+rJHzwhk2G4im6GR?~UU~^ov+*%TSC+dA_^w@`*LhqsnU?508l5k_X3->$i zuk=E~(t&(aTv4Ivxj8;M+Fn)zs|KNL@9LTX_5&s|;$ni;?OgR}GV(2$UC@Y#Y%Z9}_f>n;V+cJ$p|ph#h2*?1pToxgvl>EiEm2b)E=twseXKZM@Uo z-|ahlQp8P#?f=9*od?tcjfGa+qqt^o;hsbSn$stH`{(7cLf0*W=OBOP{Qy+==t3Ug zCIOf`0|QE^Ve~z>o#2BZ-)NZ?G5i25!R+EVf$;}R7W zMO#G3aIO{5S7xc$!dR&Iuy-&=({wY|InxYMH0!ZaY``8&+y`&N!|}izpa(Dc`e;MS zR1uWoyvnAapa4ePWW21bY_!gc7ZjqFmKKNeiZb{GKF5Wd07ZbS?Vr}!^C{uIzUK#; z5G(|zr#}X(NGB|u2ve$^K~2NK%GQl57SbPZ9nrB2dWa#=Q&lbGccEvSvH=~3%IGGB zfs)wh3z6%Pwo9t1-Gk_S1{PatJsJg~sQvt()d&M9L=PVDNR{ z_-kna$QPBAsJiC~2nZ}JET|nF$g$h2gGEL;);bsM19zhj1a%Cy4oRk|x_@x>F`XrN ze{=ZR$ml47Pq2<@j4hX?6?s4GiD=9Tpoja>&O^{qpk?TBZkZAz6B8ArrEkJb1CJgA zfhRg(0t@wSI65{B`?V3Ax%he!$7evV#Paj{A@^%kTpRc_mq;4orqZtEqvGkw=*T%}owpb}{r z83A1ZN!orEldG$1EhMII;?q=KLR-WB7LPPox=2e)e`bxDgvcDq;Ty--bts$%BqW@! z8(NSe{RGs7cQCl5Y=Axo`_zs?H9|&Q?{kV8WK|%z#hgHW-^|qX1r*u4;k!m`hV}9Q z|FCH1^`TF|Ka8b@I#rEfZ;5RiN>k9oXtXQ>MqfR5oW{VoF^+x~AQ*C@o=OK}X#bVT znu^AV05}(1l;+0rABa2oJa%b;Bg9ozquKPUUl|#t*x#xz^#my9cbK~lLr@qgeSUWh zE8C@W9SqZI?{_Rn7NT8HXMT)NxkO0|7YEZ@ zUE4Vmg;KX|gHaCrRX$e8)w%(}$dDN4Ob+4=aLOpOF#?nw;C}G_ij`T25egOeOBBIB-Uv$uqL!h$1eZv4T2<~Pos|+g) zroHB18gatZZ#BlVfIWl0f*}WDOYhfdT-pWp~z)jW2nH;&?-vY{k*adR9cDq-`9=5e-BcGQ^#lnIwyPY zVjrvzF9TyR6j_I2r-Gw=_wF6JkUN2$-L~v)74&l+KF~E^g}r#DeNS0owgAt0^!dOO z5PW=mGfPV?@Nx9vvgBzZIe^(=mU9ya2R&_U+D%tvE-5cx%1ric93PK|AySCc4mPY# zmV(b714tPypdq&zq)On#QP_4#^=8VncB`_g1K#w#K~G!hGP zrgI>MDC}W~2ZMYl##wMl^Hluk2SwD9Ay7t(Q8?WPPy`_0m`O=V*YI*s5KY}BB=iSt z2M7W8qdNHzTdW8@7Kb?uaPADGak!L1TIus@247IUy^-Jr?PnWrz+iBs%qsRlEW=Iz z9d=?evM}H}5aeh3{Yo(GLkhU8WeMgo4a4II@TA7^ZU_6IV=Wi^;4uaQV&Y(sINWBPKZk~p;D+9V8i?VyhyI!ULmMd# zPf{2`)C4Pg0G-8VP^-l}B*=2>_U+q{kVyiGfU!@7*b{Qhc<|`if=^}*L1dVpovast z)hcmbRe`5j+98&AhiC((rWD#S5wieBm_@JhGt6sy!3Drvi-VIh1?YTbWhEw47Tvo+ zFdLW!I)_~04he~jjt(hUbCaoB51@=6fp<- zLPW3jBR7`?Ml4kjAA{nEvk+s= z$jOm|S^dgT9vM&r2q=F#g*de|)Cc;I|Jng&`zpI)qyKx|*bpI2fbLuP=BN1&U*Y9~ o#g%t!cw+zkR5Xio>s&#;<002n<8!g`z~h*en1413!$6L;wH) diff --git a/sbom/server/non-fips/static/meta.json b/sbom/server/non-fips/static/meta.json index 0c4e09d39..cce24970a 100644 --- a/sbom/server/non-fips/static/meta.json +++ b/sbom/server/non-fips/static/meta.json @@ -3,8 +3,8 @@ "build": { "variant": "non-fips", "derivation": "kms-server-non-fips-static-openssl", - "output_path": "/nix/store/8402d5q3sdzdhqahpicyad4g8iin63si-cosmian-kms-server-rebuild-1-5.15.0", - "timestamp": "2026-02-12T06:14:03Z", + "output_path": "/nix/store/i6p0g1sab5lvclvvp1a1vi8ji4z371z6-cosmian-kms-server-rebuild-1-5.16.0", + "timestamp": "2026-02-15T13:46:35Z", "generator": { "tool": "sbomnix", "version": "1.7.3" diff --git a/sbom/server/non-fips/static/vulns.csv b/sbom/server/non-fips/static/vulns.csv index 75c021a34..78b6ff681 100644 --- a/sbom/server/non-fips/static/vulns.csv +++ b/sbom/server/non-fips/static/vulns.csv @@ -1,12 +1,13 @@ "vuln_id","url","package","version_local","severity","grype","osv","vulnix","sum","sortcol" +"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770940800" +"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770854400" "RHSA-2026:0794","https://osv.dev/RHSA-2026:0794","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1472","https://osv.dev/RHSA-2026:1472","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1473","https://osv.dev/RHSA-2026:1473","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1496","https://osv.dev/RHSA-2026:1496","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1503","https://osv.dev/RHSA-2026:1503","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1519","https://osv.dev/RHSA-2026:1519","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1594","https://osv.dev/RHSA-2026:1594","openssl","3.6.0","","0","1","0","1","2026A1770768000" -"RHSA-2026:1733","https://osv.dev/RHSA-2026:1733","openssl","3.6.0","","0","1","0","1","2026A1770768000" "USN-6409-1","https://osv.dev/USN-6409-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-1","https://osv.dev/USN-6541-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-6541-2","https://osv.dev/USN-6541-2","glibc","2.34-210","","0","1","0","1","2026A1770681600" @@ -18,7 +19,6 @@ "USN-7634-1","https://osv.dev/USN-7634-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-7760-1","https://osv.dev/USN-7760-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" "USN-8005-1","https://osv.dev/USN-8005-1","glibc","2.34-210","","0","1","0","1","2026A1770681600" -"RHSA-2026:1334","https://osv.dev/RHSA-2026:1334","glibc","2.34-210","","0","1","0","1","2026A1770595200" "CGA-4r5h-8hvp-w6xm","https://osv.dev/CGA-4r5h-8hvp-w6xm","openssl","3.6.0","","0","1","0","1","2026A1770249600" "CGA-9vjv-2q8r-rw73","https://osv.dev/CGA-9vjv-2q8r-rw73","openssl","3.6.0","","0","1","0","1","2026A1770249600" "RLSA-2021:1024","https://osv.dev/RLSA-2021:1024","openssl","3.6.0","","0","1","0","1","2026A1770249600"