Packages changed: MicroOS-release (20240903 -> 20240904) ima-evm-utils (1.6 -> 1.6.2) libavif (1.0.4 -> 1.1.1) libfido2 (1.14.0 -> 1.15.0) live555 (2024.06.26 -> 2024.08.01) runc (1.2.0~rc2 -> 1.2.0~rc3) rust-keylime (0.2.6~0 -> 0.2.6+13) sdbootutil (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) zlib-ng-compat (2.1.6 -> 2.2.1) === Details === ==== MicroOS-release ==== Version update (20240903 -> 20240904) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ima-evm-utils ==== Version update (1.6 -> 1.6.2) Subpackages: evmctl libimaevm5 - Update to version 1.6.2 https://github.com/linux-integrity/ima-evm-utils/blob/v1.6.2/NEWS - Remove LicenseRef-GPL-2.0-with-openssl-exception (no need due relicensing of OpenSSL 3 or later to the Apache 2 license https://github.com/linux-integrity/ima-evm-utils/commit/4a4c762c8e3cbbff5f41c682deb026d22440454d ) - Upstream added COPYING (again) and COPYING.LGPL (new), add them to %license. ==== libavif ==== Version update (1.0.4 -> 1.1.1) - update to 1.1.1: * In avif.h, change "AVIF_API AVIF_NODISCARD" back to "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation errors in the shared library build on Windows. * Fix -DAVIF_GTEST=SYSTEM * Fix infe_type and codec_config_type wrongly read as byte- aligned fields in the * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1. * When building aom as a local dependency, runtime CPU detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`; * Fix CMake config shared library leaks * Update gain map metadata to current ISO 21496-1 draft. * cmake: Only search for ASM_NASM language on x86_64 platforms. * Fix "No known features for CXX compiler" CMake error. * Fix aom link flags so that transitive library link flags are included when aom is a static library * Fix out-of-order 'dimg' grid associations * Report files with an item used in multiple 'dimg' boxes with * AVIF_RESULT_NOT_IMPLEMENTED instead of AVIF_RESULT_INVALID_IMAGE_GRID. * Add experimental API for reading and writing gain maps in AVIF files. * If enabled at compile time, add `gainMap` field to `avifImage`, * add `qualityGainMap` field to `avifEncoder`, add `gainMapPresent`, `enableDecodingGainMap`, `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to `avifDecoder`. * Utility functions for working with gain maps are also added. * Gain maps allow readers that support them to display HDR images that look good on both HDR and SDR displays. * Add experimental support for converting jpeg files with gain maps to AVIF files with gain maps. Requires libxml2, and the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag. * Add a --qgain-map flag to control the gain map quality in avifenc. * Add the headerFormat member of new type avifHeaderFormat to avifEncoder. * Add experimental API for reading and writing "mif3"-branded AVIF files behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_METAV1. * Implement avifImageScale() fallback when libyuv is not available. * Partial import of libyuv to third_party/libyuv (new LICENSE). * Add avifenc flag suffixes ":update" and ":u". Quality- relative, tiling-relative and codec-specific flags can now be positional, relative to input files. * Add experimental support for layered AVIF encoding in avifenc. * Use the --layered flag to enable layered AVIF encoding. * Layered AVIF has multiple layers, which works like frame of animated AVIF, and layers can be rendered in progressive manner on supported viewers * Only aom supports layered AVIF encoding at the time of writing. * Add --scaling-mode flag to set scaling mode of each layer. * This part of AV1 encoder is not as thoroughly tested, so there are higher possibility encoder may crash when given certain configuration or input. * Add imageSequenceTrackPresent flag to the avifDecoder struct. * avifImageScale() function was made part of the public ABI. * Add avif_cxx.h as a C++ header with basic functionality. * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB, AVIF_COLOR_PRIMARIES_BT2100, * AVIF_COLOR_PRIMARIES_DCI_P3, AVIF_TRANSFER_CHARACTERISTICS_PQ. * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR. * Require libyuv by default (but it can still be disabled with * -DAVIF_LIBYUV=OFF). * Add avifdec --icc flag to override the output color profile. * Add experimental API for reading and writing 16-bit AVIF files behind the * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM. * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to avifChromaSamplePosition enum. ==== libfido2 ==== Version update (1.14.0 -> 1.15.0) - update to 1.15.0: * bio, credman: improved CTAP 2.1 support. * hid_osx: fix issue where fido_hid_read() may block unnecessarily; gh#757. * fido2-token -I: print maxcredbloblen. * hid_linux: improved support for uhid devices. * New API calls: - fido_cred_set_attobj; - fido_cred_x5c_list_count; - fido_cred_x5c_list_len; - fido_cred_x5c_list_ptr. ==== live555 ==== Version update (2024.06.26 -> 2024.08.01) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 libliveMedia112 - update to 2024-08-01: * Updated "ServerMediaSession::generateSDPDescription()" to treat "time_t" as (long long). ==== runc ==== Version update (1.2.0~rc2 -> 1.2.0~rc3) - Update to runc v1.2.0~rc3. Upstream changelog is available from . Includes the patch for CVE-2024-45310. [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.14. Upstream changelog is available from . Includes the patch for CVE-2024-45310. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.13. Upstream changelog is available from . - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch - Backport to fix a performance issue when running lots of containers, caused by systemd getting too many mount notifications. bsc#1214960 + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch ==== rust-keylime ==== Version update (0.2.6~0 -> 0.2.6+13) - Update vendored crates (bsc#1229952, bsc#1230029) * rustix 0.37.25 * rustix 0.38.34 * shlex 1.3.0 - Update to version 0.2.6+13: * Enable test functional/iak-idevid-persisted-and-protected * build(deps): bump uuid from 1.7.0 to 1.10.0 * build(deps): bump openssl from 0.10.64 to 0.10.66 * keylime-agent/src/revocation: Fix comment indentation * keylime/crypto: Fix indentation of documentation comment * build(deps): bump thiserror from 1.0.59 to 1.0.63 * build(deps): bump serde_json from 1.0.116 to 1.0.120 * dependabot: Extend to also monitor workflow actions * ci: Disable Packit CI on CentOS Stream 9 * ci: use CODECOV_TOKEN when submitting coverage data * revocation: Use into() for unfallible transformation * secure_mount: Fix possible infinite loop * error: Rename enum variants to avoid clippy warning ==== sdbootutil ==== Version update (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240903.81f1f40: * Generate new predictions for update_all_entries * Use raw option in jq update all entries ==== zlib-ng-compat ==== Version update (2.1.6 -> 2.2.1) - Update to 2.2.1: * Changelog at https://github.com/zlib-ng/zlib-ng/releases/tag/2.2.1