New SPECS-EXTENDED packages:
SDL2: Add package version 2.24.9
SDL: add version 1.2.15
SDL_sound: add package version 1.0.3
alsa-firmware: add package version 1.2.4
alsa-plugins: add package version 1.2.7.1
cdparanoia: Add package version 10.2
cdrdao: Add package version 1.2.4
fftw: Add package version 3.3.10
gstreamer1-plugins-base: Add package version 1.20.0
libao: Add package version 1.2.0
libcanberra: Add package version 0.30
liblouis: add version 3.24.0
libmikmod: Add package version 3.3.11.1
libomxil-bellagio: add version 0.9.3
libsamplerate: Add package version 0.2.2
libwpg: add version 0.3.3
lilv: Add package version 0.24.14
linuxconsoletools: Add package version 1.8.1
lv2: Add package version 1.18.8
pipewire: Add package version 0.3.60
pulseaudio: Add package version 16.1
python-rdflib: Add package version 6.2.0
sratom: Add package version 0.6.10
zopfli: add version 1.0.3
zziplib: add package version 0.13.72
Package updates:
application-gateway-kubernetes-ingress – bump release to regenerate source and vendor code to fix CVE-2021-4235, CVE-2022-3064
coredns and etcd: create script to generate vendored modules tarball for etcd and coredns
curl - build with HTTP/2 support
dmraid - replace crontabs requirement with cronie
git - update to v2.33.6 to address critical CVE-2022-23521 & CVE-2022-41903
golang - upgrade to 1.19.4
golang – add 1.18 spec
kernel - CVE-2022-41858
kernel - add missing BuildRequires
kernel - upgrade to 5.15.87.1 version
libkcapi - Fixing 'Obsoletes' and 'Provides' for 'fipscheck' and 'hmaccalc' subpackages.
libtar: patch CVE-2021-33640
logwatch - replace crontabs requirement with cronie
ltp – add missing dependencies
prometheus – update from 2.36.0 to 2.37.0
pytest - Added missing runtime dependencies
python-certifi – update to version 2022.12.07 to address CVE-2022-23491
rear – replace crontabs requirement with cronie
systemd – update to address CVE-2022-4415
tensorflow – add missing deps
vim - update to 9.0.1189 to fix CVE-2023-0288
Removed packages:
crontabs – removed from SPECS-Extended
Tooling changes:
Github: add .gitattributes file for GitHub linguist attributes
Toolkit: CGroupsV2 Toggle Optionality for Mariner 2.0 Images
Toolkit: add ISO image verification instructions
Toolkit: add Microsoft repo to PACKAGE_URL_LIST
Toolkit: clear SRPM pack list file when SRPM_PACK_LIST argument is empty
Toolkit: fix missing dependency tracking for spec sources, refactor Makefile to skip shell commands during dry-run
Toolkit: fixed mariner_rpmspec command.
Toolkit: improve robustness of ISO initrd builds
Toolkit: move package repo update implementation to earlier stage in image build process
Toolkit: update cloud-int.cfg lock-passwd to lock_passwd
Toolkit: update documentation with packages.microsoft.com repo structure info
Toolkit: worked around RPM package resolution bug.