From 54744cf5002a2a11b22d61336a5cd8e445e3be51 Mon Sep 17 00:00:00 2001 From: Rajeev Ranjan Date: Thu, 20 Nov 2025 01:21:49 +0530 Subject: [PATCH 1/4] Release edge node agents with go 1.24.9 - use golang 1.24.9 in all agents - Fix CVE-2025-47913 Signed-off-by: Rajeev Ranjan --- .../cluster-agent.signatures.json | 2 +- SPECS/cluster-agent/cluster-agent.spec | 10 +++++--- .../hardware-discovery-agent.signatures.json | 2 +- .../hardware-discovery-agent.spec | 10 +++++--- SPECS/node-agent/node-agent.signatures.json | 2 +- SPECS/node-agent/node-agent.spec | 9 ++++--- ...atform-manageability-agent.signatures.json | 2 +- .../platform-manageability-agent.spec | 8 +++++-- .../platform-telemetry-agent.signatures.json | 2 +- .../platform-telemetry-agent.spec | 9 ++++--- .../platform-update-agent.signatures.json | 2 +- .../platform-update-agent.spec | 8 +++++-- .../reporting-agent.signatures.json | 2 +- SPECS/reporting-agent/reporting-agent.spec | 10 +++++--- cgmanifest.json | 24 +++++++++---------- 15 files changed, 64 insertions(+), 38 deletions(-) diff --git a/SPECS/cluster-agent/cluster-agent.signatures.json b/SPECS/cluster-agent/cluster-agent.signatures.json index 0528b57192..15cf711f39 100644 --- a/SPECS/cluster-agent/cluster-agent.signatures.json +++ b/SPECS/cluster-agent/cluster-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "cluster-agent-1.7.3.tar.gz": "6e12e15456034ef3be0306cd81005c920cb7e74dc70ccbae4e7965f0eb59ff6c", + "cluster-agent-1.8.3.tar.gz": "3ee848188260dcabf5ab1023aef923c3fc2d4a9327d2ca90244147e185d63e91", "cluster-agent.service": "e484c560bf881ebd12024404afc68f80493692280f6c5045990fe575ffb746bb", "env_wrapper.sh": "9b1dff883e0d38e5968e7e86363919303da0b3d0213888e7b2ed3c7659c8319c", "cluster-agent.conf": "4324f15acaa9d78738c231867f504c53d753a184a59538e6ccf679d4b8642f36", diff --git a/SPECS/cluster-agent/cluster-agent.spec b/SPECS/cluster-agent/cluster-agent.spec index d46833ce03..63f34af522 100644 --- a/SPECS/cluster-agent/cluster-agent.spec +++ b/SPECS/cluster-agent/cluster-agent.spec @@ -1,7 +1,7 @@ Summary: Installs/uninstalls orchestration software on an edge node using command obtained from Cluster Orchestrator. Name: cluster-agent -Version: 1.7.3 -Release: 4%{?dist} +Version: 1.8.3 +Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation Distribution: Edge Microvisor Toolkit @@ -14,7 +14,7 @@ Source4: rke2-path.conf Source5: cluster-agent.sudoers Source6: cluster_agent.te Source7: cluster_agent.fc -BuildRequires: golang <= 1.24.7 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers Requires: curl @@ -127,6 +127,10 @@ install -m 644 %{modulename}.pp %{buildroot}%{_datadir}/selinux/packages/%{modul %selinux_modules_uninstall -s %{selinuxtype} %{modulename} %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 1.8.3-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Thu Nov 05 2025 Kishan Mochi - 1.7.3-4 - build with golang <= 1.24.7 - remove inbm selinux diff --git a/SPECS/hardware-discovery-agent/hardware-discovery-agent.signatures.json b/SPECS/hardware-discovery-agent/hardware-discovery-agent.signatures.json index d9ad6bfd24..65fc27c99c 100644 --- a/SPECS/hardware-discovery-agent/hardware-discovery-agent.signatures.json +++ b/SPECS/hardware-discovery-agent/hardware-discovery-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "hardware-discovery-agent-1.7.1.tar.gz": "fa6031c2fb1c9af081b664bd4709fc088c51cb828c8a10eaa569dd0b9b7cc91e", + "hardware-discovery-agent-1.8.1.tar.gz": "63ffb071c2bc977350e30fd2574f6390dc6031425da4ca49cd670bf78cd8a4b6", "hardware-discovery-agent.service": "2c3151d61ca649ced26764de6008833fbcab45a966b6f18f4113d4cf5a4846b7", "env_wrapper.sh": "0fa0e748f2d1c0b81c240fa59fac4647571518c53479000adb4ba467031cccf6", "hardware-discovery-agent.conf": "ffb9cbd4bf7b95c5dc39d3bc84ab7279b034203533c63856818638636f41c01a", diff --git a/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec b/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec index 8702dde866..85629a9f96 100644 --- a/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec +++ b/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec @@ -1,7 +1,7 @@ Summary: Edge node hardware information reporting Name: hardware-discovery-agent -Version: 1.7.1 -Release: 3%{?dist} +Version: 1.8.1 +Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation Distribution: Edge Microvisor Toolkit @@ -12,7 +12,7 @@ Source2: %{name}.service Source3: env_wrapper.sh Source4: hd_agent.te Source5: hd_agent.fc -BuildRequires: golang <= 1.24.7 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers Requires: dmidecode @@ -114,6 +114,10 @@ install -m 644 %{modulename}.pp %{buildroot}%{_datadir}/selinux/packages/%{modul %selinux_modules_uninstall -s %{selinuxtype} %{modulename} %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 1.8.1-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Thu Nov 05 2025 Kishan Mochi - 1.7.1-3 - build with golang <= 1.24.7 - remove inbm selinux diff --git a/SPECS/node-agent/node-agent.signatures.json b/SPECS/node-agent/node-agent.signatures.json index f96ef9c239..941b11556f 100644 --- a/SPECS/node-agent/node-agent.signatures.json +++ b/SPECS/node-agent/node-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "node-agent-1.8.1.tar.gz": "373f869d4cbc69241a669f6e3a14d81c092a9431df73ca6ff51e18a0ab05cb04", + "node-agent-1.9.1.tar.gz": "c24bfa2a46512daeff9d16cf86a9aee15da3d86561fda2c36e10a0239339d998", "node-agent.service": "aa4da847c625e36ba6e22d769e9442521ec6e8eeb542af8ef24f2cad60da03c2", "env_wrapper.sh": "ee5d31b33495426840a742c944088e7f7fe56ec95f0547990f9283e24bf792d1", "node-agent.conf": "f5304d46df115cbe2e8f9e018f22d03e19f3a2cd35ee269478454bf0b269b90f", diff --git a/SPECS/node-agent/node-agent.spec b/SPECS/node-agent/node-agent.spec index 2645d38635..88c0e01e4c 100644 --- a/SPECS/node-agent/node-agent.spec +++ b/SPECS/node-agent/node-agent.spec @@ -1,6 +1,6 @@ Summary: Edge node registration and trust management Name: node-agent -Version: 1.8.1 +Version: 1.9.1 Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation @@ -12,8 +12,7 @@ Source2: env_wrapper.sh Source3: %{name}.conf Source4: node_agent.te Source5: node_agent.fc -BuildRequires: golang >= 1.24.4 -BuildRequires: golang < 1.25.0 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers Requires: (%{name}-selinux if selinux-policy-targeted) @@ -160,6 +159,10 @@ sed -i '/client-proxy/{N;d;}' %{_sysconfdir}/edge-node/node/confs/%{name}.yaml %selinux_modules_uninstall -s %{selinuxtype} %{modulename} %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 1.9.1-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Wed Oct 15 2025 Rajeev Ranjan - 1.8.1-1 - Send status initializing after provision diff --git a/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json b/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json index 8ef372b151..945b3777df 100644 --- a/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json +++ b/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "pm-agent-0.2.2.tar.gz": "388a652dbcb0ecfa670475ca2241ce6b2eff691dbf3c090872a885b64038f593", + "pm-agent-0.3.0.tar.gz": "0a996ac54afc19099ede867b005fd7d62e69196a77e9cc451c0645dc252a668e", "platform-manageability-agent.service": "fdd68c7ab244785c4dda515bb0daff7abf75dec45ffa8e99f1f0c6e50fa1355d", "env_wrapper.sh": "88061a00697508d90a9ecce9bd43f3a00cc8d028a181337895ac1368d970a6f9", "platform-manageability-agent.conf": "efe3d39585266222720a828f4617a25beaf6e6334ee7d9bfa57fba4e4bd7f6ef", diff --git a/SPECS/platform-manageability-agent/platform-manageability-agent.spec b/SPECS/platform-manageability-agent/platform-manageability-agent.spec index 6fb1250c01..7aa1ee5c6f 100644 --- a/SPECS/platform-manageability-agent/platform-manageability-agent.spec +++ b/SPECS/platform-manageability-agent/platform-manageability-agent.spec @@ -1,6 +1,6 @@ Summary: Platform managebility agent for out of band opration. Name: platform-manageability-agent -Version: 0.2.2 +Version: 0.3.0 Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation @@ -11,7 +11,7 @@ Source1: %{name}.conf Source2: %{name}.service Source3: env_wrapper.sh Source4: %{name}.sudoers -BuildRequires: golang <= 1.24.7 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros Requires: rpc @@ -77,6 +77,10 @@ cp copyright %{buildroot}%{_defaultlicensedir}/%{name} %{systemd_postun_with_restart %{name}.service} %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 0.3.0-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Mon Nov 10 2025 Jagrat Acharya - 0.2.2-1 - Updated PMA Version. - PMA User Lock issue fixed. diff --git a/SPECS/platform-telemetry-agent/platform-telemetry-agent.signatures.json b/SPECS/platform-telemetry-agent/platform-telemetry-agent.signatures.json index 5408109aea..46c883afb9 100644 --- a/SPECS/platform-telemetry-agent/platform-telemetry-agent.signatures.json +++ b/SPECS/platform-telemetry-agent/platform-telemetry-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "platform-telemetry-agent-1.5.0.tar.gz": "de3091376b129be60ad612de6a7e612b10d7fdd85b5a8cec629de76dd0317142", + "platform-telemetry-agent-1.6.1.tar.gz": "26207aed353eb948cf731c813f8dbe9bfba5e525d57ad6f004739efd9aff1838", "platform-telemetry-agent.service": "441d64259c0cb4ee1c5a1ca4fff06454abdab66ddbc01c496e2efcc0ceb88aee", "env_wrapper.sh": "e3d9c27c8e31f6a2a3e530ce31fb6c3078ea3c9cdd4647d5151d9ea7f58296c7", "platform-telemetry-agent.conf": "555a6fcec46c3a27139b4946e3eae30df2fc8a61c83efe2fc616492fee11a925", diff --git a/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec b/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec index b09a5d3ebb..d0107519a2 100644 --- a/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec +++ b/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec @@ -4,7 +4,7 @@ Summary: An agent for managing and updating metric and log configurations Name: platform-telemetry-agent -Version: 1.5.0 +Version: 1.6.1 Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation @@ -22,8 +22,7 @@ Source5: platform_telemetry_agent.fc %global prefix /usr # The source tarball containing the platform telemetry agent source code with vendor modules. # Source tarball is generated by using Makefile and vendor modules is generated using "go mod vendor". -BuildRequires: golang >= 1.24.4 -BuildRequires: golang < 1.25.0 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros BuildRequires: selinux-policy-devel Requires(pre): %{_bindir}/systemd-sysusers @@ -148,6 +147,10 @@ echo "Assigning KUBECONFIG End" %systemd_postun platform-telemetry-agent.service %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 1.6.1-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Fri Nov 07 2025 Kishan Mochi - 1.5.0-1 - cleanup old inbm entries from configs diff --git a/SPECS/platform-update-agent/platform-update-agent.signatures.json b/SPECS/platform-update-agent/platform-update-agent.signatures.json index 999cc4688b..212f55b2d7 100644 --- a/SPECS/platform-update-agent/platform-update-agent.signatures.json +++ b/SPECS/platform-update-agent/platform-update-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "platform-update-agent-1.7.3.tar.gz": "a7426459f53c85b1be0018d894a2d5cf6f9041f98d2cbe79c1f68e514bacf5be", + "platform-update-agent-1.8.1.tar.gz": "99f7bf3eee3f3841eff15932fcca0dc809534c8774074d686f6101251d3fb292", "platform-update-agent.service": "e64c76941527f7a74c8d9c8119adbf202edcf6239fe11f6ef67610b73a152d5e", "env_wrapper.sh": "b42ae5895c55e88c34a0bd9c4fac04a26dbf213052aae4dd03d225774188ff1f", "platform-update-agent.conf": "5fd67227ac36173bb271d36a48d5c1ac75c6775253c0b3f03f3ccae9981745fa", diff --git a/SPECS/platform-update-agent/platform-update-agent.spec b/SPECS/platform-update-agent/platform-update-agent.spec index 9e1cc8c9cb..178371c308 100644 --- a/SPECS/platform-update-agent/platform-update-agent.spec +++ b/SPECS/platform-update-agent/platform-update-agent.spec @@ -3,7 +3,7 @@ Summary: An agent for updating the OS and bare metal agents packages Name: platform-update-agent -Version: 1.7.3 +Version: 1.8.1 Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation @@ -18,7 +18,7 @@ Source4: platform-update-agent.te Source5: platform-update-agent.fc %global debug_package %{nil} %global _build_id_links none -BuildRequires: golang <= 1.24.7 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros BuildRequires: selinux-policy-devel Requires(pre): %{_bindir}/systemd-sysusers @@ -133,6 +133,10 @@ rm -rf %{_var}/edge-node/pua echo "Successfully purged platform-update-agent" %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 1.8.1-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Mon Nov 10 2025 Niket Kumar - 1.7.3-1 - PUA changes to update kernel paramter diff --git a/SPECS/reporting-agent/reporting-agent.signatures.json b/SPECS/reporting-agent/reporting-agent.signatures.json index 81e2504ee4..046e84fe02 100644 --- a/SPECS/reporting-agent/reporting-agent.signatures.json +++ b/SPECS/reporting-agent/reporting-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "reporting-agent-0.0.4.tar.gz": "91bc21a893086be7ea00b8addb28e785915ae552a68b0cc10687a5ecd36871b8", + "reporting-agent-0.1.0.tar.gz": "154d9592a0ba0d5bf6b42173815fed931e3fd1f6ad6b5533a7aa11b4a49c83fa", "edge-node-metrics.cron": "95a1155723b4e87e016681d292663f79a3d331bfa911f24b91a0782b2684b334", "reporting-agent.conf": "0edc6515cdde3e0ddfc7fcf74796c3571e2ace1d0a5acfa102fb3d50bba7fc3d" } diff --git a/SPECS/reporting-agent/reporting-agent.spec b/SPECS/reporting-agent/reporting-agent.spec index ed8f0a094c..158912a21b 100644 --- a/SPECS/reporting-agent/reporting-agent.spec +++ b/SPECS/reporting-agent/reporting-agent.spec @@ -1,7 +1,7 @@ Summary: An agent gathering statistics from Open Edge Platform installations Name: reporting-agent -Version: 0.0.4 -Release: 2%{?dist} +Version: 0.1.0 +Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation Distribution: Edge Microvisor Toolkit @@ -10,7 +10,7 @@ Source0: %{url}/archive/refs/tags/%{name}/v%{version}.tar.gz#/%{name}-%{v Source1: %{name}.conf Source2: edge-node-metrics.cron -BuildRequires: golang >= 1.24.4 +BuildRequires: golang <= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers @@ -75,6 +75,10 @@ cp copyright %{buildroot}%{_defaultlicensedir}/%{name} %sysusers_create_package %{name} %{SOURCE1} %changelog +* Thu Nov 20 2025 Rajeev Ranjan - 0.1.0-1 +- Update to golang 1.24.9 +- Fix CVE-2025-47913 + * Tue Sep 2 2025 Polmoorx shiva kumar - 0.0.4-2 - Update go version to use above 1.24.4 diff --git a/cgmanifest.json b/cgmanifest.json index 277d71f198..98787e4030 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -1897,8 +1897,8 @@ "type": "other", "other": { "name": "cluster-agent", - "version": "1.7.3", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/cluster-agent/v1.7.3.tar.gz" + "version": "1.8.3", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/cluster-agent/v1.8.3.tar.gz" } } }, @@ -5300,8 +5300,8 @@ "type": "other", "other": { "name": "hardware-discovery-agent", - "version": "1.7.1", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/hardware-discovery-agent/v1.7.1.tar.gz" + "version": "1.8.1", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/hardware-discovery-agent/v1.8.1.tar.gz" } } }, @@ -14702,8 +14702,8 @@ "type": "other", "other": { "name": "node-agent", - "version": "1.8.1", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/node-agent/v1.8.1.tar.gz" + "version": "1.9.1", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/node-agent/v1.9.1.tar.gz" } } }, @@ -21663,8 +21663,8 @@ "type": "other", "other": { "name": "platform-manageability-agent", - "version": "0.2.2", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-manageability-agent/v0.2.2.tar.gz" + "version": "0.3.0", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-manageability-agent/v0.3.0.tar.gz" } } }, @@ -21683,8 +21683,8 @@ "type": "other", "other": { "name": "platform-telemetry-agent", - "version": "1.5.0", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-telemetry-agent/v1.5.0.tar.gz" + "version": "1.6.1", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-telemetry-agent/v1.6.1.tar.gz" } } }, @@ -21693,8 +21693,8 @@ "type": "other", "other": { "name": "platform-update-agent", - "version": "1.7.3", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-update-agent/v1.7.3.tar.gz" + "version": "1.8.1", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-update-agent/v1.8.1.tar.gz" } } }, From 70eba771f7cdd11e883d679a53d091a6261f98ca Mon Sep 17 00:00:00 2001 From: Rajeev Ranjan Date: Thu, 20 Nov 2025 01:29:05 +0530 Subject: [PATCH 2/4] Update cgmanifest Signed-off-by: Rajeev Ranjan --- cgmanifest.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cgmanifest.json b/cgmanifest.json index 98787e4030..bc50b4ae3d 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -26663,8 +26663,8 @@ "type": "other", "other": { "name": "reporting-agent", - "version": "0.0.4", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/reporting-agent/v0.0.4.tar.gz" + "version": "0.1.0", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/reporting-agent/v0.1.0.tar.gz" } } }, From 6696ba99c75c6420455b0f71512d4b71f4605ab6 Mon Sep 17 00:00:00 2001 From: Rajeev Ranjan Date: Thu, 20 Nov 2025 17:21:44 +0530 Subject: [PATCH 3/4] PMA @ 0.3.1 Signed-off-by: Rajeev Ranjan --- .../platform-manageability-agent.signatures.json | 2 +- .../platform-manageability-agent.spec | 4 ++-- cgmanifest.json | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json b/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json index 945b3777df..f7b2056511 100644 --- a/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json +++ b/SPECS/platform-manageability-agent/platform-manageability-agent.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "pm-agent-0.3.0.tar.gz": "0a996ac54afc19099ede867b005fd7d62e69196a77e9cc451c0645dc252a668e", + "pm-agent-0.3.1.tar.gz": "a5d14c97cdb90e926fd64509ec5eba5b18135ee6d6aefeb43feef9cc269f953d", "platform-manageability-agent.service": "fdd68c7ab244785c4dda515bb0daff7abf75dec45ffa8e99f1f0c6e50fa1355d", "env_wrapper.sh": "88061a00697508d90a9ecce9bd43f3a00cc8d028a181337895ac1368d970a6f9", "platform-manageability-agent.conf": "efe3d39585266222720a828f4617a25beaf6e6334ee7d9bfa57fba4e4bd7f6ef", diff --git a/SPECS/platform-manageability-agent/platform-manageability-agent.spec b/SPECS/platform-manageability-agent/platform-manageability-agent.spec index 7aa1ee5c6f..dfae5cc53e 100644 --- a/SPECS/platform-manageability-agent/platform-manageability-agent.spec +++ b/SPECS/platform-manageability-agent/platform-manageability-agent.spec @@ -1,6 +1,6 @@ Summary: Platform managebility agent for out of band opration. Name: platform-manageability-agent -Version: 0.3.0 +Version: 0.3.1 Release: 1%{?dist} License: Apache-2.0 Vendor: Intel Corporation @@ -77,7 +77,7 @@ cp copyright %{buildroot}%{_defaultlicensedir}/%{name} %{systemd_postun_with_restart %{name}.service} %changelog -* Thu Nov 20 2025 Rajeev Ranjan - 0.3.0-1 +* Thu Nov 20 2025 Rajeev Ranjan - 0.3.1-1 - Update to golang 1.24.9 - Fix CVE-2025-47913 diff --git a/cgmanifest.json b/cgmanifest.json index 503a1a58dd..a90abf98f2 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -21663,8 +21663,8 @@ "type": "other", "other": { "name": "platform-manageability-agent", - "version": "0.3.0", - "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-manageability-agent/v0.3.0.tar.gz" + "version": "0.3.1", + "downloadUrl": "https://github.com/open-edge-platform/edge-node-agents/archive/refs/tags/platform-manageability-agent/v0.3.1.tar.gz" } } }, From cdad146a78e544341c103d84db23f35cd0026903 Mon Sep 17 00:00:00 2001 From: Rajeev Ranjan Date: Fri, 21 Nov 2025 16:11:26 +0530 Subject: [PATCH 4/4] Review: Update lower/upper version of go Signed-off-by: Rajeev Ranjan --- SPECS/cluster-agent/cluster-agent.spec | 3 ++- SPECS/hardware-discovery-agent/hardware-discovery-agent.spec | 3 ++- SPECS/node-agent/node-agent.spec | 3 ++- .../platform-manageability-agent.spec | 3 ++- SPECS/platform-telemetry-agent/platform-telemetry-agent.spec | 3 ++- SPECS/platform-update-agent/platform-update-agent.spec | 3 ++- SPECS/reporting-agent/reporting-agent.spec | 4 ++-- 7 files changed, 14 insertions(+), 8 deletions(-) diff --git a/SPECS/cluster-agent/cluster-agent.spec b/SPECS/cluster-agent/cluster-agent.spec index 63f34af522..6ea9b997ea 100644 --- a/SPECS/cluster-agent/cluster-agent.spec +++ b/SPECS/cluster-agent/cluster-agent.spec @@ -14,7 +14,8 @@ Source4: rke2-path.conf Source5: cluster-agent.sudoers Source6: cluster_agent.te Source7: cluster_agent.fc -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers Requires: curl diff --git a/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec b/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec index 85629a9f96..387b9d2366 100644 --- a/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec +++ b/SPECS/hardware-discovery-agent/hardware-discovery-agent.spec @@ -12,7 +12,8 @@ Source2: %{name}.service Source3: env_wrapper.sh Source4: hd_agent.te Source5: hd_agent.fc -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers Requires: dmidecode diff --git a/SPECS/node-agent/node-agent.spec b/SPECS/node-agent/node-agent.spec index 88c0e01e4c..1afdd9ba00 100644 --- a/SPECS/node-agent/node-agent.spec +++ b/SPECS/node-agent/node-agent.spec @@ -12,7 +12,8 @@ Source2: env_wrapper.sh Source3: %{name}.conf Source4: node_agent.te Source5: node_agent.fc -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers Requires: (%{name}-selinux if selinux-policy-targeted) diff --git a/SPECS/platform-manageability-agent/platform-manageability-agent.spec b/SPECS/platform-manageability-agent/platform-manageability-agent.spec index dfae5cc53e..a075e2b0b0 100644 --- a/SPECS/platform-manageability-agent/platform-manageability-agent.spec +++ b/SPECS/platform-manageability-agent/platform-manageability-agent.spec @@ -11,7 +11,8 @@ Source1: %{name}.conf Source2: %{name}.service Source3: env_wrapper.sh Source4: %{name}.sudoers -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros Requires: rpc diff --git a/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec b/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec index d0107519a2..89d7e126c9 100644 --- a/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec +++ b/SPECS/platform-telemetry-agent/platform-telemetry-agent.spec @@ -22,7 +22,8 @@ Source5: platform_telemetry_agent.fc %global prefix /usr # The source tarball containing the platform telemetry agent source code with vendor modules. # Source tarball is generated by using Makefile and vendor modules is generated using "go mod vendor". -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros BuildRequires: selinux-policy-devel Requires(pre): %{_bindir}/systemd-sysusers diff --git a/SPECS/platform-update-agent/platform-update-agent.spec b/SPECS/platform-update-agent/platform-update-agent.spec index 178371c308..33a83ec69b 100644 --- a/SPECS/platform-update-agent/platform-update-agent.spec +++ b/SPECS/platform-update-agent/platform-update-agent.spec @@ -18,7 +18,8 @@ Source4: platform-update-agent.te Source5: platform-update-agent.fc %global debug_package %{nil} %global _build_id_links none -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros BuildRequires: selinux-policy-devel Requires(pre): %{_bindir}/systemd-sysusers diff --git a/SPECS/reporting-agent/reporting-agent.spec b/SPECS/reporting-agent/reporting-agent.spec index 158912a21b..ab6a252b46 100644 --- a/SPECS/reporting-agent/reporting-agent.spec +++ b/SPECS/reporting-agent/reporting-agent.spec @@ -9,8 +9,8 @@ URL: https://github.com/open-edge-platform/edge-node-agents Source0: %{url}/archive/refs/tags/%{name}/v%{version}.tar.gz#/%{name}-%{version}.tar.gz Source1: %{name}.conf Source2: edge-node-metrics.cron - -BuildRequires: golang <= 1.24.9 +BuildRequires: golang < 1.25 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros Requires(pre): %{_bindir}/systemd-sysusers