Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20240904 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240903 -> 20240904) ima-evm-utils (1.6 -> 1.6.2) libavif (1.0.4 -> 1.1.1) libfido2 (1.14.0 -> 1.15.0) live555 (2024.06.26 -> 2024.08.01) raspberrypi-firmware (2024.03.27 -> 2024.08.30) raspberrypi-firmware-config (2024.03.27 -> 2024.08.30) runc (1.2.0~rc2 -> 1.2.0~rc3) rust-keylime (0.2.6~0 -> 0.2.6+13) sdbootutil (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) zlib-ng-compat (2.1.6 -> 2.2.1) === Details === ==== MicroOS-release ==== Version update (20240903 -> 20240904) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ima-evm-utils ==== Version update (1.6 -> 1.6.2) Subpackages: evmctl libimaevm5 - Update to version 1.6.2 https://github.com/linux-integrity/ima-evm-utils/blob/v1.6.2/NEWS - Remove LicenseRef-GPL-2.0-with-openssl-exception (no need due relicensing of OpenSSL 3 or later to the Apache 2 license https://github.com/linux-integrity/ima-evm-utils/commit/4a4c762c8e3cbbff5f41... ) - Upstream added COPYING (again) and COPYING.LGPL (new), add them to %license. ==== libavif ==== Version update (1.0.4 -> 1.1.1) - update to 1.1.1: * In avif.h, change "AVIF_API AVIF_NODISCARD" back to "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation errors in the shared library build on Windows. * Fix -DAVIF_GTEST=SYSTEM * Fix infe_type and codec_config_type wrongly read as byte- aligned fields in the * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1. * When building aom as a local dependency, runtime CPU detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`; * Fix CMake config shared library leaks * Update gain map metadata to current ISO 21496-1 draft. * cmake: Only search for ASM_NASM language on x86_64 platforms. * Fix "No known features for CXX compiler" CMake error. * Fix aom link flags so that transitive library link flags are included when aom is a static library * Fix out-of-order 'dimg' grid associations * Report files with an item used in multiple 'dimg' boxes with * AVIF_RESULT_NOT_IMPLEMENTED instead of AVIF_RESULT_INVALID_IMAGE_GRID. * Add experimental API for reading and writing gain maps in AVIF files. * If enabled at compile time, add `gainMap` field to `avifImage`, * add `qualityGainMap` field to `avifEncoder`, add `gainMapPresent`, `enableDecodingGainMap`, `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to `avifDecoder`. * Utility functions for working with gain maps are also added. * Gain maps allow readers that support them to display HDR images that look good on both HDR and SDR displays. * Add experimental support for converting jpeg files with gain maps to AVIF files with gain maps. Requires libxml2, and the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag. * Add a --qgain-map flag to control the gain map quality in avifenc. * Add the headerFormat member of new type avifHeaderFormat to avifEncoder. * Add experimental API for reading and writing "mif3"-branded AVIF files behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_METAV1. * Implement avifImageScale() fallback when libyuv is not available. * Partial import of libyuv to third_party/libyuv (new LICENSE). * Add avifenc flag suffixes ":update" and ":u". Quality- relative, tiling-relative and codec-specific flags can now be positional, relative to input files. * Add experimental support for layered AVIF encoding in avifenc. * Use the --layered flag to enable layered AVIF encoding. * Layered AVIF has multiple layers, which works like frame of animated AVIF, and layers can be rendered in progressive manner on supported viewers * Only aom supports layered AVIF encoding at the time of writing. * Add --scaling-mode flag to set scaling mode of each layer. * This part of AV1 encoder is not as thoroughly tested, so there are higher possibility encoder may crash when given certain configuration or input. * Add imageSequenceTrackPresent flag to the avifDecoder struct. * avifImageScale() function was made part of the public ABI. * Add avif_cxx.h as a C++ header with basic functionality. * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB, AVIF_COLOR_PRIMARIES_BT2100, * AVIF_COLOR_PRIMARIES_DCI_P3, AVIF_TRANSFER_CHARACTERISTICS_PQ. * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR. * Require libyuv by default (but it can still be disabled with * -DAVIF_LIBYUV=OFF). * Add avifdec --icc flag to override the output color profile. * Add experimental API for reading and writing 16-bit AVIF files behind the * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM. * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to avifChromaSamplePosition enum. ==== libfido2 ==== Version update (1.14.0 -> 1.15.0) - update to 1.15.0: * bio, credman: improved CTAP 2.1 support. * hid_osx: fix issue where fido_hid_read() may block unnecessarily; gh#757. * fido2-token -I: print maxcredbloblen. * hid_linux: improved support for uhid devices. * New API calls: - fido_cred_set_attobj; - fido_cred_x5c_list_count; - fido_cred_x5c_list_len; - fido_cred_x5c_list_ptr. ==== live555 ==== Version update (2024.06.26 -> 2024.08.01) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 libliveMedia112 - update to 2024-08-01: * Updated "ServerMediaSession::generateSDPDescription()" to treat "time_t" as (long long). ==== raspberrypi-firmware ==== Version update (2024.03.27 -> 2024.08.30) - Update to bf12222 (2024-08-30): * firmware: arm_dt: Delay power property handling * firmware: AI Camera Support * firmware: video_encode: Add colourspace support See: #1885 * firmware: arm_loader: SET_POWER_STATE should only consider bit 0 See: #1905 * firmware: filesystem: Prevent any sdcard modifications See: #1893 * firmware: filesystem: Accept 0xf (W95 Ext) as an extended partition type * firmware: arm_dt: Support HAT EEPROM dtparams * firmware: arm_display: Add support for changing the pixel order via the mailbox See: #1320 * firmware: di_fast: Avoid green line at bottom of image See: https://forum.libreelec.tv/thread/28367-green-pulsing-line-rpi4 * firmware: arm_dt: On 2711, force otg_mode=1 if xhci is enabled See: raspberrypi/linux#6062 * firmware: arm_dt: Improve power HAT+ support * firmware: arm_loader: Add user otp read and write functions See: raspberrypi/linux#6014 * firmware: dtoverlay: Use %u when converting u32s to strings See: raspberrypi/linux#6039 * firmware: video_decode: CONFIGCHANGED not wanted with lack of aspect ratio in new frame See: https://forum.libreelec.tv/thread/28391-cvideoplayeraudio-process-stream-sta... ==== raspberrypi-firmware-config ==== Version update (2024.03.27 -> 2024.08.30) - Update to bf12222 (2024-08-30): * firmware: arm_dt: Delay power property handling * firmware: AI Camera Support * firmware: video_encode: Add colourspace support See: #1885 * firmware: arm_loader: SET_POWER_STATE should only consider bit 0 See: #1905 * firmware: filesystem: Prevent any sdcard modifications See: #1893 * firmware: filesystem: Accept 0xf (W95 Ext) as an extended partition type * firmware: arm_dt: Support HAT EEPROM dtparams * firmware: arm_display: Add support for changing the pixel order via the mailbox See: #1320 * firmware: di_fast: Avoid green line at bottom of image See: https://forum.libreelec.tv/thread/28367-green-pulsing-line-rpi4 * firmware: arm_dt: On 2711, force otg_mode=1 if xhci is enabled See: raspberrypi/linux#6062 * firmware: arm_dt: Improve power HAT+ support * firmware: arm_loader: Add user otp read and write functions See: raspberrypi/linux#6014 * firmware: dtoverlay: Use %u when converting u32s to strings See: raspberrypi/linux#6039 * firmware: video_decode: CONFIGCHANGED not wanted with lack of aspect ratio in new frame See: https://forum.libreelec.tv/thread/28391-cvideoplayeraudio-process-stream-sta... ==== runc ==== Version update (1.2.0~rc2 -> 1.2.0~rc3) - Update to runc v1.2.0~rc3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3>. Includes the patch for CVE-2024-45310. [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.14. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.14>. Includes the patch for CVE-2024-45310. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.13. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.12>. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch - Backport <https://github.com/opencontainers/runc/pull/3931> to fix a performance issue when running lots of containers, caused by systemd getting too many mount notifications. bsc#1214960 + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch ==== rust-keylime ==== Version update (0.2.6~0 -> 0.2.6+13) - Update vendored crates (bsc#1229952, bsc#1230029) * rustix 0.37.25 * rustix 0.38.34 * shlex 1.3.0 - Update to version 0.2.6+13: * Enable test functional/iak-idevid-persisted-and-protected * build(deps): bump uuid from 1.7.0 to 1.10.0 * build(deps): bump openssl from 0.10.64 to 0.10.66 * keylime-agent/src/revocation: Fix comment indentation * keylime/crypto: Fix indentation of documentation comment * build(deps): bump thiserror from 1.0.59 to 1.0.63 * build(deps): bump serde_json from 1.0.116 to 1.0.120 * dependabot: Extend to also monitor workflow actions * ci: Disable Packit CI on CentOS Stream 9 * ci: use CODECOV_TOKEN when submitting coverage data * revocation: Use into() for unfallible transformation * secure_mount: Fix possible infinite loop * error: Rename enum variants to avoid clippy warning ==== sdbootutil ==== Version update (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240903.81f1f40: * Generate new predictions for update_all_entries * Use raw option in jq update all entries ==== zlib-ng-compat ==== Version update (2.1.6 -> 2.2.1) - Update to 2.2.1: * Changelog at https://github.com/zlib-ng/zlib-ng/releases/tag/2.2.1