Packages changed:
  MicroOS-release (20261023 -> 20261024)
  fftw3 (3.3.10 -> 3.3.11)
  harfbuzz (14.6.0 -> 15.0.0)
  jbigkit (2.1 -> 2.2)
  live555 (2026.10.17 -> 2026.10.23)
  pciutils (3.14.0 -> 3.15.0)
  pcsc-lite (2.3.3 -> 2.5.3)
  python-certifi (2026.7.22 -> 2026.10.19)
  userspace-rcu (0.15.6 -> 0.15.7)

=== Details ===

==== MicroOS-release ====
Version update (20261023 -> 20261024)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== fftw3 ====
Version update (3.3.10 -> 3.3.11)

- improve summaries
- Use HTTP to download sources instead of FTP.
- Update to version 3.3.11:
  * New API fftw_copy_plan().
  * Support SVE SIMD instructions.
  * Support LoongArch LSX and LASX SIMD instructions.
  * Support Apple ARM, RISC-V and LoongArch cycle counters.
  * Fix SSE2 double-precision unaligned access segfaults.
  * threads/openmp/mpi-devel now require pkgconfig(fftw3/f/l)
    (provided by fftw3-devel); man pages ship as regular files.
- Modernize spec file (spec-cleaner, drop Group/BuildRoot).

==== harfbuzz ====
Version update (14.6.0 -> 15.0.0)
Subpackages: libharfbuzz-gobject0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0

- Update to version 15.0.0:
  * Support for the new tables and formats in the ISO Open Font Format (OFF)
    5th edition is now enabled by default:
    + New tables and formats for 24-bit glyph indices (a.k.a. beyond-64k): the
    `GLYF`, `LOCA`, `GVAR`, `MAXP`, `HHEA`, `HMTX`, `VHEA`, and `VMTX`
    tables, `cmap` format 15, `VORG` version 2, `COLR` `PaintGlyph2`, the
    24-bit `GSUB`, `GPOS`, `GDEF`, `BASE`, and `JSTF` formats, and extended
    TrueType Collection directories. A test font, `NotoSans-beyond64k.ttf`,
    which merges the Noto Sans fonts into a single font, can be found at:
    https://drive.google.com/file/d/1vMQI9mZMzfKIMHD96Iie40Oyo9NnnweH/view
    + Cubic curves in `GLYF` outlines.
    + The `DMAP` table, supported since 14.6.0.
  * Support instancing axes not referenced by retained `VARC` data. The latest
    `VARC` test fonts can be found at:
    https://github.com/notofonts/noto-cjk-varco/releases/tag/v0.005
  * The raster (`libharfbuzz-raster`), vector (`libharfbuzz-vector`), and GPU
    (`libharfbuzz-gpu`) libraries are no longer considered experimental. This
    means that the HarfBuzz API and ABI stability guarantees now apply to
    these libraries as well.
  * Fix possible use-after-free in `hb_font_set_face()`, which now resets the
    font functions to the defaults for the new face. The function is now
    deprecated. Use `hb_font_create()` instead.
  * Fix heap-buffer-overflow in `hb_font_set_variation()` after
    `hb_font_set_face()` switches to a face with more variation axes.
  * Subsetting `CFF` and `CFF2` fonts whose subroutine calls are not preceded
    by an immediate subroutine number now fails instead of silently dropping
    the table, unless desubroutinizing.
  * Overriding atomic operators at compile time is not supported anymore.
  * Rewrite the number parser without Ragel, fixing various edge cases.
  * Harden the experimental WebAssembly shaper against malicious fonts.
  * Update the experimental Rust shaper (HarfRust) to 0.15, and the
    `fontations` font functions to read-fonts 0.46.
  * Update the `kbts` shaping backend to `kb_text_shape` 2.28g, and support
    font variations in it.
  * Various subsetting and instancing fixes, especially for `CFF2`, `COLR`,
    and variable layout tables.
  * Various fixes to the raster and vector libraries.
  * Various variable font fixes.
  * Various fixes for malformed fonts.
  * Various documentation fixes.
  * Various build and CI fixes.
  * Deprecated API: -hb_font_set_face()

==== jbigkit ====
Version update (2.1 -> 2.2)

- Update to 2.2:
  - Robustness release, upgrade is recommended when processing BIE
    or PBM/PGM data from untrusted sources.
  - The jbig.c decoder now caps the final image layer at 2 GB by
    default via the new sd->maxmem limit (adjustable), mitigating
    denial of service through excessive image dimensions.
  - pbmtojbg and pbmtojbg85 validate PBM/PGM header dimensions and
    check size calculations against integer overflow.
  - Fixed jbg85_dec_finalheight() macro typo, a jbg_enc_options()
    range check, jbgtopbm division by zero, and several converter
    file-handling fixes.
  - struct jbg_dec_state gained maxmem: libjbig consumers must be
    recompiled against the new headers (soname unchanged).
  - Dropped jbigkit-CVE-2022-1210.patch, superseded upstream;
    rebased jbigkit-2.1-shlib.patch to the 2.2 sources, fixing
    parallel-build races in the test programs and test suite.
- Spec cleanup: BuildRequires for gcc and make,
  %ldconfig_scriptlets, https source URL.

==== live555 ====
Version update (2026.10.17 -> 2026.10.23)
Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock33

- Update to version 2026.10.23:
  * The bug fix in version 2026.10.21 was not complete. This should fix it for
    real.
- Bump lmdmaj define to 122 following upstream changes.
- Fix typos in the description
- Update to version 2026.10.22:
  * Fixed a bug that had accidentally been introduced in version 2026.07.23: We
    now correctly parse the "RTP/SAVP" and "RTP/SAVP/TCP" profile strings.
  * When a RTSP server is asked to stream RTP/RTSP-over-TCP, we don't record
    the TCP socket number to use when we're processing the "SETUP" command.
    Instead, we have to wait until we're processing the "PLAY" command, because
    the "PLAY" command might be using a different TCP connection (and thus a
    different socket number).
- Bump lmdmaj define to 121 following upstream changes.
- Update to version 2026.10.21:
  * Fixed a bug that could possibly allow a malicious client to cause a RTSP
    server to crash when streaming from an AC-3 audio file.

==== pciutils ====
Version update (3.14.0 -> 3.15.0)
Subpackages: libpci3

- Update to version 3.15.0:
  * New capabilities are decoded: MMIO Register Block Locator,
    Flit Error Injection, Flit Logging.
  * Decoding of PCIe capabilities updated to Gen7.
  * lspci and setpci warn when the "-s" or "-d" option is given
    multiple times.
  * Improved display of interrupts in "lspci -vv": routing of
    interrupt pins is shown only if the pins are not disabled,
    routing of MSI(X) interrupts is shown when available.
  * Dump back-end can read the dump from stdin with "-" as file name.
  * libpci adds pci_filter_has_slot and pci_filter_has_id
    (backward compatible, sover stays 3).
  * FreeBSD supports 64-bit addresses; minor Windows back-end
    improvements.
  * Updated pci.ids.
- Spec cleanup: drop obsolete Group tags.
- Rebase pciutils-ocloexec.patch for the reworked dump and sysfs
  back-ends (stdin dump support).

==== pcsc-lite ====
Version update (2.3.3 -> 2.5.3)

- version 2.5.3
  - pcscd.service: preserve card sessions across polkit restarts
  - correctly decode all ATRs (fix the fix suggested by AI)
  - Fix authorization for uid > 65536
- version 2.5.2
  - hotplug_libudev: rescan "serial" readers in HPReCheckSerialReaders
  - fix minor issues found by AI tool
- version 2.5.1
  - Fix a bug (introduced in 2.5.0) with multi-slots readers
  - Add support of Haiku Operating System
- version 2.5.0
  - Do not limit to 16 readers only
  - Remove support of autotools
  - Fix a crash when rescanning serial configs
  - Fix a memory leak in Polkit
  - tokenparser: avoid a crash with corrupted Info.plist files
  - Some other minor improvements
- version 2.4.1
  - Add backward version support on the client side
  - Add backward version support on the server side
  - hotplug libudev: rescan the USB bus with "pcscd --hotplug"
  - fix a value in pcscd.service systemd file
  - meson: install systemd files even if libsystemd is not used
  - Some other minor improvements
- version 2.4.0
  - Run pcscd under a pcscd user instead of root when using systemd
  - Set PIDFile in systemd service file
  - Protect contextMapList modifications using a mutex
  - meson:
  . Fix libpcsclite.pc file
  . respect builtin meson default_library option
  . build and install spy lib & tool only when needed
  - UnitaryTests/*.py: fix pylint warnings
  - Improve Doxygen documentation

==== python-certifi ====
Version update (2026.7.22 -> 2026.10.19)

- Update to 2026.10.19:
  Remove the compromised eMudhra CA certificates.

==== userspace-rcu ====
Version update (0.15.6 -> 0.15.7)

- update to 0.15.7:
  * call-rcu worker: set CPU affinity on first non-empty dequeue
  * Fix: leaky wfcq tests
  * Fix: test_build.c: Test output mismatch
  * Fix: workqueue leaks mutexes on FreeBSD
  * Fix: call-rcu leaks mutexes on FreeBSD
  * call_rcu: pin per-CPU worker at thread startup
  * urcu-pointer: Add rcu_dereference_sym2() taking the pointer
    address
  * urcu-pointer: Fix missing memory ordering in
    rcu_dereference_sym()