New Core packages
debootstrap: upgrade to 1.0.128+nmu2 and promote to base repo
edk2: promoted from extended, upgrade to 20230301gitf80f052277c8
future: promoted from extended, upgraded to 0.18.3
libssh: promoted from extended, upgrade to 0.10.4
mtools: promoted from extended, upgrade to 4.0.43
nbdkit: promoted from extended, upgrade to 1.32.6
networkd-dispatcher: add version 2.2.4
priv_wrapper: added version 1.0.1
python-pefile: version 2023.2.7 added for pyton-virt-firmware
python-virt-firmware: version 23.5 added for edk2
Modified Core Packages
KeysInUse-OpenSSL: upgrade to 0.3.3
SymCrypt-OpenSSL: upgraded to v1.3.0
SymCrypt: upgraded to v103.0.1
c-ares: upgrade to 1.19.1 for CVE-2023-32067, CVE-2023-31130, and CVE-2023-31147
cmake: Patch vendored curl for CVE-2023-23914
containerized-data-importer: upgrade to version 1.55.0
cryptsetup: Disable ssh-token subpackage since requiring libssh-devel creates a circular dependency.
curl: add patch for CVE-2023-28322
edk2: patch CVE-2023-0464 in bundled openssl
iptables: Allow DHCP6 related packets through firewall
kernel-mshv: Align mariner_cmdline_mshv with the working configuration from old loader's linuxloader.conf
kernel: Add nvme_multipath and change default
libdrm: update to 2.4.114
libvirt: patch for CVE-2023-2700
llvm16: limit 2 compile jobs in parallel
llvm: limit 2 compile jobs in parallel
python-pyvmomi: this package has been removed
qt5-qtbase: patch for CVE-2023-24607
qt5-stsvg: patch CVE-2023-32573
New Extended Packages
fonts-rpm-macros
Modified Extended Packages
GeoIP: Dropping package requirement of GeoIP-data in GeoIP
cassandra: upgrade version to 4.0.10 to address CVE-2023-30601
Modifed Extras Packages
mshv-bootloader: update to v25357.1.230428-1528.1
mshv-kd: update to v25357.1.230428-1528.1
mshv-linuxloader: update to 0.5.0-2.2
Toolkit changes
Add flag to disable PMC repository
Documentation: Update recommended golang version to 1.19
timestamp: Record performance of tooling using timestamps