Packages changed:
  MicroOS-release (20260803 -> 20260804)
  cockpit-tukit (0.1.7~git0.61e54f1 -> 0.1.8~git0.0c769f8)
  crypto-policies
  google-noto-fonts (20260701 -> 20260801)
  libgpg-error
  libraw (0.22.1 -> 0.22.2)
  mpg123 (1.33.6 -> 1.33.7)
  polkit-default-privs (1550+20260623.563df94 -> 1550+20260803.90784eb)

=== Details ===

==== MicroOS-release ====
Version update (20260803 -> 20260804)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== cockpit-tukit ====
Version update (0.1.7~git0.61e54f1 -> 0.1.8~git0.0c769f8)

- Update to 0.1.8~git0.0c769f8:
  * Dependency updates
  * Translation updates

==== crypto-policies ====

- Disable umac-128* in DEFAULT, FUTURE and BSI openssh policies (bsc#1259515)
  * Add patch:
    crypto-policies-Disable-umac-128-in-DEFAULT-FUTURE-and-BSI-openssh-policies.patch

==== google-noto-fonts ====
Version update (20260701 -> 20260801)
Subpackages: google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts

- Update to 20260801:
  * Sans Batak: fix the lack of anchoring on the "A" letter (#14)

==== libgpg-error ====

- Add upstream patch to fix build on 32-bit arm:
  * libgpg-error-fix-armv7.patch

==== libraw ====
Version update (0.22.1 -> 0.22.2)

- update to 0.22.2:
  * Fixed 6yr old typos in USE_6BY9RPI 8- and 16- bit
    decoders
  * trimSpaces: Improved handling of zero-length strings
    and strings consisting only of spaces
  * Misc fixups
  * Fix links to license files in contributing document
  * removeExcessiveSpaces: handle zero-length strings
    the right way
  * contributing rules updated
  * Zero read buffers before fread
  * FP DNG loader: check for tile index;
    convertFloatToInt: avoid possible integer overflow
  * open_bayer(): reject images with raw size/visible
    size less than 22 (as in open_file/identify);
    vng_interpolate: do not interpolate images less than 8x8
  * PPM16 thumb: check against LIBRAW_MAX_THUMBNAIL_MB
  * open_bayer(): additional input data checks
  * Olympus/14bit: refuse incorrect wbits metadata
  * X3F decoder: initialise raw storage if
    LIBRAW_CALLOC_RAWSTORE defined
  * crx decoder: check plane size agains
    imgdata.rawparams.max_raw_memory_mb
  * Crx decoder: avoid possible int32 overflow on
    allocation size calculations
  * check for ifd->bps values in FP DNG decoder
  * fixed stack memory/previous image metadata exposure
    (reported by DMSAN)
  * LibRaw_memmgr: allow malloc to fail on local pointer
    array small allocation. It will definitely fall later on
    large-buffer allocation
  * rotated fuji: stricter image size limits;
    raw2image(ex): avoid possible 32-bit overflow on alloc size
    calculations
  * width/height and iwidth/height values documented
  * width/height and iwidth/height values documented
  * wavelet denoise: ensure allocation size not exceed
    4GB
  * unpack_thumb:  check JPEG thumbnail size before
    performing allocation;  Remove all allocation test results
    because LibRaw::calloc/malloc will raise exception if
    allocation fails
  * removed row_stride signed/unsigned mix; check
    row_stride value against buffer size
  * fixed possible next struct item override in
    x3f_parse
  * parse_phase_one: prevent buffer overrun if incorrect
    flat field data provided
  * Limit parse_mos recursion depth; parse_qt: raise
    exception, do not hide too depth nesting error
  * parse_qt: avoid too deep recursion

==== mpg123 ====
Version update (1.33.6 -> 1.33.7)

- Update to version 1.33.7
  mpg123:
  * Fix information disclosure of uninitialied memory for
  - -auth-file without line endings.
  * Fix out-of-bounds read/write when combining --continue
  - -random --listentry <n> where n is larger than the playlist
    size.
  * Fix a harmless valgrind memory leak report by not nulling
    playlist name.
  * Fix a mostly harmless OOB read of 1 byte when printing USLT
    lyrics.
  * Fix leaking file descriptor on read error from --equalizer
    file.
  * Hardening of loading HTTP(S) via curl or wget against funky
    URLs by including the -- separator. No actual vulnerability,
    tough, just extra care.
  out123:
  * Fix heap overrun on --endian conversion with differing input
    and output channel counts.
  * Fix parsing of filter specs with whitespace before commas,
    which resulted in out-of-bounds writes before.
  libmpg123, mpg123: Harden memory realloc calls against
    multiplication overflow of size_t in arguments.
    Specifically, this addresses part of bug 389 with possible
    application abuse of mpg123_set_index64().
  libmpg123:
  * Fix possible use of uninitialized values in layer III
    dequantization.
    III_dequantize_sample() for consistent output also for
    strange input. The new code seems to be slightly faster
    after some rearrangements.
  * Fix a double free when deleting a handle after failed
    mpg123_decoder() call
    (possibly among others).
  * More strong wording in API that ID3 text convenience links
    are short-lived, but safeguard against ignorant use by
    nulling them early.
  * Prevent double free in mpg123_set_index() 32 bit wrapper
    being called with index size 0.
  * Harden against an application wielding a foot gun by handing
    in an undersized decoding buffer betwee seek and read
    (return error before trying to decode and discard frames in
    that case).
  * Do properly terminate ID3v2 texts coming in UTF16 encoding
    when they overwrite previous frames, like with other
    encodings. The symptom was a shorter second frame resulting
    in a combined text with the earlier longer frame.
  * Check and properly handle null source buffer and zero size
    in mpg123_store_utf8() instead of reading past (before)
    buffers.
  * Ensure clients get ID3v1 data with (unmotivated)
    mpg123_id3_raw() only if the parser decided that it is there,
    not possibly the last 128 bytes of a seekable stream without
    ID3v1 tag.
  * Prevent impossible NtoM resampling with too low target rate
    (like 1 Hz) which would trgger endless looping.
  libout123:
  * Fix deadlock in buffer mode when combined with (stereo) 24
    bit output. Now also mpg123 --buffer 4096 -e s24 shall
    actuallly work. Sorry.
  * Abort early on zero/negative rate and channel count in
    out123_start().
  * Fix divide by zero in WAV writing by catching channel counts
    that go zero in the 16 bit WAV header field.
  libsyn123:
  * Explictly reject mismatched format for appending filters with
    syn123_setup_filter(), preventing memory errors from that
    API-violating use.
  * Harden the dirty resampling interpolator against extreme
    rates (around 1e18 Hz)
    by fixing a sample offset check to not do the exact
    overflowing addition that it is supposed to guard against.
    The fine resampler was… fine.
  * Error out on trying to create a filter of order 0 instead of
    dividing by zero later.

==== polkit-default-privs ====
Version update (1550+20260623.563df94 -> 1550+20260803.90784eb)

- Update to version 1550+20260803.90784eb:
  * profiles: renamed calamares (bsc#1273196)
  * build(deps): bump actions/checkout from 6.0.2 to 7.0.1