shield
Recommended update for keylime
SUSE-SLES-16.0-1216
This update for keylime fixes the following issues: - Update to version 7.14.3: * tests: + Verify GET handler race condition fix with unit tests + Accept both error messages for invalid ECC points + Fix asyncio.Event() usage in shutdown tests * fix: + Handle concurrent agent deletion in verifier GET handler + Suppress type checker errors for compatibility import in types.py + Correct [A-z] regex in DM-IMA grammar STRING token + Update pre-commit isort to 8.0.1 to match tox * docs: + Empty refstate skips PCR replay and policy evaluation + Document qualifying data change for IAK certification in v2.6 * tpm: + Use only policy's relevant PCRs for event log verification + Parse TPM2B_NAME with _unpackv instead of fixed-size slice + Refactor verify_aik_with_iak to use proper TPMS_ATTEST parsing * elparsing: + Harden stderr decoding for tpm2_eventlog + Check tpm2_eventlog exit code instead of stderr * DB: Increase evidence_items.agent_id column length * [Automatic] Update Keylime base image (2026-07-02, 2026-06-01) * CI: Use PR label to disable e2e tests through Packit * [CI] Split e2e CI testing to fast and full * api: Bump pull-mode API version to 2.6 * registrar: Fix missing return after error in _bind_ak_to_iak * Fix mypy error and include runtime deps in test-requirements * Fix PUSH mode agent status tracking across restarts and recovery * Preserve FAIL status when timeout fires * Block PUSH mode FAIL to PASS auto-recovery * server: Add max_workers config to cap worker process count
-
Release DateJul 11 2026
-
References
-
Typerecommended
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
-
Packageskeylime-config
Configuration file for keylimekeylime-firewalld7.14.3-160000.1.1 lock rpm
Firewalld service file for keylimekeylime-logrotate7.14.3-160000.1.1 lock rpm
Logrotate for Keylime servieskeylime-registrar7.14.3-160000.1.1 lock rpm
Keylime registrar servicekeylime-tenant7.14.3-160000.1.1 lock rpm
Keylime tenant command line toolkeylime-tpm_cert_store7.14.3-160000.1.1 lock rpm
Certify store for the TPMkeylime-verifier7.14.3-160000.1.1 lock rpm
Keylime verifier servicepython313-keylime7.14.3-160000.1.1 lock rpm
Open source TPM software for Bootstrapping and Maintaining Trust7.14.3-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
-
Packageskeylime-config
Configuration file for keylimekeylime-firewalld7.14.3-160000.1.1 lock rpm
Firewalld service file for keylimekeylime-logrotate7.14.3-160000.1.1 lock rpm
Logrotate for Keylime servieskeylime-registrar7.14.3-160000.1.1 lock rpm
Keylime registrar servicekeylime-tenant7.14.3-160000.1.1 lock rpm
Keylime tenant command line toolkeylime-tpm_cert_store7.14.3-160000.1.1 lock rpm
Certify store for the TPMkeylime-verifier7.14.3-160000.1.1 lock rpm
Keylime verifier servicepython313-keylime7.14.3-160000.1.1 lock rpm
Open source TPM software for Bootstrapping and Maintaining Trust7.14.3-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 aarch64
-
Packageskeylime-config
Configuration file for keylimekeylime-firewalld7.14.3-160000.1.1 lock rpm
Firewalld service file for keylimekeylime-logrotate7.14.3-160000.1.1 lock rpm
Logrotate for Keylime servieskeylime-registrar7.14.3-160000.1.1 lock rpm
Keylime registrar servicekeylime-tenant7.14.3-160000.1.1 lock rpm
Keylime tenant command line toolkeylime-tpm_cert_store7.14.3-160000.1.1 lock rpm
Certify store for the TPMkeylime-verifier7.14.3-160000.1.1 lock rpm
Keylime verifier servicepython313-keylime7.14.3-160000.1.1 lock rpm
Open source TPM software for Bootstrapping and Maintaining Trust7.14.3-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
-
Packageskeylime-config
Configuration file for keylimekeylime-firewalld7.14.3-160000.1.1 lock rpm
Firewalld service file for keylimekeylime-logrotate7.14.3-160000.1.1 lock rpm
Logrotate for Keylime servieskeylime-registrar7.14.3-160000.1.1 lock rpm
Keylime registrar servicekeylime-tenant7.14.3-160000.1.1 lock rpm
Keylime tenant command line toolkeylime-tpm_cert_store7.14.3-160000.1.1 lock rpm
Certify store for the TPMkeylime-verifier7.14.3-160000.1.1 lock rpm
Keylime verifier servicepython313-keylime7.14.3-160000.1.1 lock rpm
Open source TPM software for Bootstrapping and Maintaining Trust7.14.3-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
-
Packageskeylime-config
Configuration file for keylimekeylime-firewalld7.14.3-160000.1.1 lock rpm
Firewalld service file for keylimekeylime-logrotate7.14.3-160000.1.1 lock rpm
Logrotate for Keylime servieskeylime-registrar7.14.3-160000.1.1 lock rpm
Keylime registrar servicekeylime-tenant7.14.3-160000.1.1 lock rpm
Keylime tenant command line toolkeylime-tpm_cert_store7.14.3-160000.1.1 lock rpm
Certify store for the TPMkeylime-verifier7.14.3-160000.1.1 lock rpm
Keylime verifier servicepython313-keylime7.14.3-160000.1.1 lock rpm
Open source TPM software for Bootstrapping and Maintaining Trust7.14.3-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
-
Packageskeylime-config
Configuration file for keylimekeylime-firewalld7.14.3-160000.1.1 lock rpm
Firewalld service file for keylimekeylime-logrotate7.14.3-160000.1.1 lock rpm
Logrotate for Keylime servieskeylime-registrar7.14.3-160000.1.1 lock rpm
Keylime registrar servicekeylime-tenant7.14.3-160000.1.1 lock rpm
Keylime tenant command line toolkeylime-tpm_cert_store7.14.3-160000.1.1 lock rpm
Certify store for the TPMkeylime-verifier7.14.3-160000.1.1 lock rpm
Keylime verifier servicepython313-keylime7.14.3-160000.1.1 lock rpm
Open source TPM software for Bootstrapping and Maintaining Trust7.14.3-160000.1.1 lock rpm