Packages changed:
  MicroOS-release (20261103 -> 20261104)
  apparmor
  keylime
  libapparmor
  libusbmuxd (2.1.0 -> 2.1.1)
  mokutil (0.7.2 -> 0.7.3)
  permissions
  xen (4.22.0_06 -> 4.22.0_08)

=== Details ===

==== MicroOS-release ====
Version update (20261103 -> 20261104)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== apparmor ====

- add transmission-2246.patch: allow transmission to lock its
  lockfile (boo#1289007)

==== keylime ====
Subpackages: keylime-config keylime-firewalld keylime-logrotate keylime-registrar keylime-tenant keylime-tpm_cert_store keylime-verifier python313-keylime

- Fix ownership of packaged files (bsc#1289196)
  * Install /usr/lib/keylime/tpm_cert_store as root:root, as the
    EK CA certificates are only read by the services
  * Install the vendor configuration in /usr/etc/keylime as
    root:keylime with modes 0750/0640, readable but not writable
    by the services
  * Use the keylime group instead of tss in tmpfiles and
    logrotate, as the server components never access the TPM
  * keylime-config requires keylime-tpm_cert_store to ensure the
    keylime user and group exist before installation

==== libapparmor ====

- add transmission-2246.patch: allow transmission to lock its
  lockfile (boo#1289007)

==== libusbmuxd ====
Version update (2.1.0 -> 2.1.1)

- update to 2.1.1:
  * Changes:
  * tools: Fix potential issue with select() in case the
    network fd is higher than the usbmux fd
  * Switch to better initializer strategy
  * Fix compilation on MSVC
  * iproxy: Make sure to print correct socket error messages
  * inetcat: Make sure to report correct error messages

==== mokutil ====
Version update (0.7.2 -> 0.7.3)

- Update to 0.7.3
  + show help if no args or --help even on unsupported system
  + remove unused int_to_b64()
  + on --test-key, return non-zero if test key is not enrolled
  + introduce --is-sb-enabled parameter
  + return zero in case --test-key is enrolled
  + Remove traditional des and md5 passwords
  + man: fix typo "|- X" -> "| -X"
  + PasswordCrypt: Fix an ABI issue
  + Fix bash completion (bsc#1286920)
- Move the bash completion script to mokutil-bash-completion

==== permissions ====
Subpackages: permctl permissions-config

- Ship chkstat.8 man page as a symlink to permctl.8; the chkstat
  compatibility symlink had no manual page of its own
- Wrap the permissions-config description within the line length
  limit
- Remove Group tags and use pkgconfig() BuildRequires for the
  libraries the build probes: libacl, libcap and tclap (spec-cleaner)
- Keep the pkgconfig() BuildRequires in the main block and delimit
  the test suite requirements with # SECTION markers, so the two
  groups stay separate when spec-cleaner sorts the BuildRequires

==== xen ====
Version update (4.22.0_06 -> 4.22.0_08)

- bsc#1288663 - VUL-0: CVE-2026-102703,CVE-2026-102704: xen:
  arbitrary read/write via grant copy (XSA-523)
  6ae9cd89-gnttab-complete-checking-in-gnttab_copy_buf_valid.patch
  6ae9cd89-gnttab-move-only-local-domain-may-copy-by-frame-check.patch