Packages changed: kernel-firmware (20230724 -> 20230731) keylime (7.3.0 -> 7.4.0) liblangtag (0.6.3 -> 0.6.4) libpaper (2.1.0 -> 2.1.1) python-click (8.1.3 -> 8.1.6) srt (1.5.1 -> 1.5.2) system-config-printer === Details === ==== kernel-firmware ==== Version update (20230724 -> 20230731) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20230731 (git commit 253cc179d849): * amdgpu: Update DMCUB for DCN314 & Yellow Carp * ice: add LAG-supporting DDP package * i915: Update MTL DMC to v2.13 * i915: Update ADLP DMC to v2.20 * cirrus: Add CS35L41 firmware for Dell Oasis Models * copy-firmware: Fix linking directories when using compression * copy-firmware: Fix test: unexpected operator * qcom: sc8280xp: LENOVO: remove directory sym link * qcom: sc8280xp: LENOVO: Remove execute bits ==== keylime ==== Version update (7.3.0 -> 7.4.0) Subpackages: keylime-config keylime-firewalld keylime-logrotate keylime-registrar keylime-tenant keylime-tpm_cert_store keylime-verifier python311-keylime - Add BSD-3-Clause license - Update to version v7.4.0 (CVE-2023-38200, bsc#1213310): * Monthly release (7.4.0) * codestyle: Fix tsa_rfc3161.py and have it pyright checked * installer.sh: support Anolis OS whose ID is anolis * tpm_util: Add the BSD license to the file due to functions from TPM 2 code * codestyle: Have pyright check keylime/da directory * docs: add missing options for verifier, remove vactivate * codestyle: Have pyright check mba/elchecking/ except for example.py * registrar_common: fix style complain * registrar_common: fix missing select and sock * Changes to script create_runtime_policy.sh, fixes #1426 * tenant: non-zero exit code in case of error * mba: making MBA policy parser and checker pluggable * create_runtime_policy: fix bash typo * Extend Registrar SSL socket to be non-blocking * Several improvements for the "create_runtime_policy.sh" script * tpm_util: Replace a logger.error with an Exception in case of invalid signature * tpm_util: Remove useless comparison of always identical hashes * tests: Disable Packit CI on Rawhide due to infra issues * adding kubectl to tenant docker image ==== liblangtag ==== Version update (0.6.3 -> 0.6.4) - Fix check-tag test failled [0001-ro-MD-ro-to-get-make-check-to-succeed.patch] - Version update to 0.6.4 Replace the word of 'master' to 'primary' trivial update Stop shipping ChangeLog Fix build issue for docs ==== libpaper ==== Version update (2.1.0 -> 2.1.1) Subpackages: libpaper-tools libpaper2 - Update to 2.1.1: * This release fixes the -N flag of paperconf. ==== python-click ==== Version update (8.1.3 -> 8.1.6) - Update to 8.1.6 * Replace all typing.Dict occurrences to typing.MutableMapping for parameter hints. #2255 * Improve type hinting for decorators and give all generic types parameters. * Fix return value and type signature of shell_completion.add_completion_class function. #2421 * Bash version detection doesn’t fail on Windows. #2461 * Completion works if there is a dot (.) in the program name. #2166 * Improve type annotations for pyright type checker. #2268 * Improve responsiveness of click.clear(). #2284 * Improve command name detection when using Shiv or PEX. #2332 * Avoid showing empty lines if command help text is empty. #2368 * ZSH completion script works when loaded from fpath. #2344. * EOFError and KeyboardInterrupt tracebacks are not suppressed when standalone_mode is disabled. #2380 * @group.command does not fail if the group was created with a custom command_class. #2416 * multiple=True is allowed for flag options again and does not require setting default=(). #2246, #2292, #2295 * Make the decorators returned by @argument() and @option() reusable when the cls parameter is used. #2294 * Don’t fail when writing filenames to streams with strict errors. Replace invalid bytes with the replacement character (�). #2395 * Remove unnecessary attempt to detect MSYS2 environment. #2355 * Remove outdated and unnecessary detection of App Engine environment. #2554 * echo() does not fail when no streams are attached, such as with pythonw on Windows. #2415 * Argument with expose_value=False do not cause completion to fail. #2336 * Fix an issue with type hints for @click.command(), @click.option(), and other decorators. Introduce typing tests. #2558 * Fix an issue with type hints for @click.group(). #2558 - Drop fix-tests.patch ==== srt ==== Version update (1.5.1 -> 1.5.2) - Update to 1.5.2: * API - 41c4b1f Fixed #ifdef ENABLE_AEAD_API_PREVIEW (#2603). - b3a21e1 SRT version raised to 1.5.2. - c0d9fcd Restored resetlogfa(..) in udt.h. Reverting #2558, although udt.h is not the official SRT API. - 87de405 Added ENABLE_AEAD_API_PREVIEW build option to enable AEAD API. - 60d1237 Crypto mode 'auto' implemented for listener (#2574). - 27e7d8d Socket Options: do not allow AES GCM if TSBPD is disabled. - 3e4561e Add GCM to the SRT API. * Core Functionality - 3cefede Correct remaining endianness issues - 30e7ccd Minor fix of variable shadowing. - 6fcff6d Fixed various compiler warnings on various platforms (#2679). - 59cde53 Fixed FEC Emergency resize crash (#2717). - 2fcd3d4 Fix crypto mode auto for listener sender (#2711). - b010763 Fixed typos in MBedTLS where it referred to GnuTLS (#2699). - a991767 Fix peer filter config being rejected because of endianness - 1cffd2f Added rejection handshake sent to the peer in rendezvous mode (#2667). - f57ba89 Added missing thread watchdog ticks in 3 thread loop (#2669). - e8d0533 Fixed old ENABLE_AEAD_PREVIEW. - 599c1fb Reworked the CRcvBuffer::dropMessage(..) function (#2661). - 7948772 Removed duplicate lines (#2660). - 3ffc93f Fixed CRcvBuffer::dropMessage (#2657). - e9a3955 Fixed guard for rcv-rexmit fields (#1859). - 22e97f8 Fixed warnings and removed redundant includes (#2658). - c83c31b Reduce frequency of the decryption failure log (#2602). - 21b55a2 Disabled warnings various platforms and fixed C++20 Windows build (#2411). - 65bef37 Set CLOSING state when closing a socket (#2643). - 02cba9e Drop undecrypted packet based on sequence number (#2654). - 6d774dd Fixed invalid ASSERT checking outdated object in haicrypt (#2652). - 8db35de Refaxed and fixed multiplexer reusage (#2608). - 6c92a13 Fix crash when enable heavy log and socket id less than 10 (#2619). - 64dedef CodeQL: operation requires 22 bytes. - 0c583f8 CodeQL warning: checking NULL after new. - b8962b4 Fixed PKTINFO case that was failing for IPv4+IPv6 bound sockets (#2630). - a42a39f Fixed wrong null-safety condition check in haicrypt (#2616). - 30f6f6b Removed extra redundant condition checks (#2615). - 5f02310 Fix negative id when wrap around - f533716 Fixed reject reason by a caller if connection is UNSECURE (#2622). - 04e8dbc Fixed default reject reason for a listener callback (#2605). - 0b9d583 AEAD: don't break a connection on decrypt failure. - 6db28dc RCV Buffer Refax: added some utils and simplifications (#2522). - 5889a2c AES-GCM payload length check (#2591). - 45232ad Allow fileCC in group mode - 98b1b00 Added extraction of IP_PKTINFO when reading (#456). - de9fc45 Fix CRcvBuffer last position in getTimespan_ms (#2579). - 38b4211 Remove use variable length array (#2279). - 78dd987 Fixed missing DROPREQ for LOSSREPORT that partially predates ACK (#2498). - 4090b25 Reject caller to caller connection (#2562). - 0a835ea Refax: moved removal of one seq from fresh loss list to a separate function (#2521). - 19af5d1 Obtain ConnectionLock while sending crypto keys. - 3d517cf Fixed a warning: member referenced before initialized (#2433). - fc82eac Refax: remove usage of LOGF/HLOGF (#2566). - 637d439 Refax: removed m_iRcvLastSkipAck and its dependencies (#2546). - 6c52f2d Pass std::string by const ref where possible. - 6d62096 Applied clang-format on md5.cpp and md5.h. - 2c48cba MD5: Removed null pointer subtraction (may have undefined behavior). - ae39052 Fixed rendezvous connection in the Non Blocking Mode (#2548). - 0138898 Fixed cloning the RX crypto context (AEAD) - be1ccf5 Moved KM refresh in packUniqueData() (#2541). - f864cec Fixed TARGET_OS_MAC not defined. Wrong include order. - 432f2d8 fix CSndBuffer parameter incorrect in AES GCM mode - cbfa812 Refax/postfix: further fixes after last refax changes (#2528) - e082f30 Fixed validation of input parameters in srt_connect (#2520). - 932e5bd Cleanup of bonding conditionals and unused code (#2525). - f477b51 Fixed connected peer address recording (#2526) - b76c8b2 Fixed CRcvBuffer::getAvailSize() may jump around. (#2490) - 71c3e40 Refax: safety improvements for RCV loss list and closing state (#2517) - 491e6e8 Extract RCV buffer insertion handling to a separate function (#2500). - 258a858 Refax: added size cache to the group container (#2510). - 2fd1363 Refax: improve logging and code readability around specific logging (#2511). - f7a024a Refax: removed the synconmsg property and its handling in the group (#2509) - 53735e1 Don't consider tool old ACK as IPE, it' may caused by network. - d26bbf7 Fixed a false alarm: ACK ERROR...(diff -1) - 0f6e7c7 Fixed the inconsistency between getFirstLostSeq() and ackDataUpTo() (#2488) - ea86302 Reduced calls to steady_clock::now() from two to one. - 8e9958a Reject if SRT_MAGIC_CODE is not set in the HS induction response. - 8e67aa7 Tune logs of group members adding and removing. - c01c646 Fixed AES-GCM support check. ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-common system-config-printer-common-lang system-config-printer-dbus-service udev-configure-printer - Explicitly use --with-cups-serverbin-dir to find SERVERBIN when cups.pc is not provided by older cups (boo#1213883).