# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.21.0-3
changelog:
  - Do not require pycotap to run PySol, pycotap is only needed for the single
    unittest ( https://github.com/shlomif/PySolFC/pull/353 )


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Germano Massullo <germano.massullo@gmail.com> - 3.14.14-18
changelog:
  - Replaced BuildRequires: gnome-vfs2 with BuildRequires: GConf2-devel More infos at https://bugzilla.redhat.com/show_bug.cgi?id=1745727#c5


author: Than Ngo <than@redhat.com> - 125.0.6422.60-1
changelog:
  - update to 125.0.6422.60
    * High CVE-2024-4947: Type Confusion in V8
    * High CVE-2024-4948: Use after free in Dawn
    * Medium CVE-2024-4949: Use after free in V8
    * Low CVE-2024-4950: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 125.0.6422.76-1
changelog:
  - fix bz#2282246, update to 125.0.6422.76
    * High CVE-2024-5157: Use after free in Scheduling
    * High CVE-2024-5158: Type Confusion in V8
    * High CVE-2024-5159: Heap buffer overflow in ANGLE
    * High CVE-2024-5160: Heap buffer overflow in Dawn
  - cleanup


author: Than Ngo <than@redhat.com> - 125.0.6422.141-1
changelog:
  - update to 125.0.6422.141
    * High CVE-2024-5493: Heap buffer overflow in WebRTC
    * High CVE-2024-5494: Use after free in Dawn
    * High CVE-2024-5495: Use after free in Dawn
    * High CVE-2024-5496: Use after free in Media Session
    * High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
    * High CVE-2024-5498: Use after free in Presentation API
    * High CVE-2024-5499: Out of bounds write in Streams API
  - fixed rhbz#2264332 - Chromium is unable to send/receive video on MS Teams
  - cleanup chromium.conf


author: Sérgio Basto <sergio@serjux.com> - 0.103.7-4
changelog:
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Sérgio Basto <sergio@serjux.com> - 0.103.8-2
changelog:
  - Split out documentation into separate -doc sub-package
  - (#2128276) Please port your pcre dependency to pcre2
  - Explicit dependency on systemd since systemd-devel no longer has this dependency on F37+
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Orion Poplawski <orion@nwra.com> - 1.0.6-1
changelog:
  - Update to 1.0.6

    * Mon Apr 08 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-5
    - Update clamav-data and README.fedora.md

    * Thu Apr 04 2024 John Sullivan <jsullivan@nasuni.com> - 1.0.5-4
    - Update EPEL 7 and 8 support for 1.0.5

    * Sat Mar 16 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-3
    - (#1679375) fixes syntax error in /etc/logrotate.d/clamd.exim

    * Tue Mar 05 2024 Sérgio Basto <sergio@serjux.com> - 1.0.5-2
    - set nullblog to fix post script (#2253914)
    - Properly check valgrind arches

    * Thu Feb 08 2024 Orion Poplawski <orion@nwra.com> - 1.0.5-1
    - Update to 1.0.5

    * Tue Jan 23 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

    * Sun Oct 29 2023 Orion Poplawski <orion@nwra.com> - 1.0.4-1
    - Update to 1.0.4
    - Remove docs again from main package (bz#2230512)

    * Fri Aug 18 2023 Orion Poplawski <orion@nwra.com> - 1.0.2-1
    - Update to 1.0.2 CVE-2023-20197 (bz#2232508)

    * Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.1-5
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

    * Mon Feb 27 2023 Orion Poplawski <orion@nwra.com> - 1.0.1-4
    - Mark cvd files is clamav-data as %config(noreplace) (bz#2170876)
    - Rename clamav-update to clamav-freshclam
    - Make clamav-freshclam supplement clamd
    - Have clamav-freshclam ghost all of the .cld and .cvd files
    - Update data files with help of Cisco-Talos/cvdupdate
    - Update to 1.0.1
    - Make sure RUSTFLAGS are passed to rustc (bz#2167194)
    - Fix multilib install


author: Robert Scheck <robert@fedoraproject.org> 8.5.0-10
changelog:
  - backport from 8.5.0-10: fix typo in the cprop_hardreg patch (#2028609)
  - backport from 8.5.0-9: apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)


author: Robert Scheck <robert@fedoraproject.org> 8.5.0-13
changelog:
  - backport from 8.5.0-13: require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport from 8.5.0-13: backport Default widths with -fdec-format-defaults patch (#2074614)
  - backport from 8.5.0-12: Fix nop generation in annobin plugin (#2067150)
  - backport from 8.5.0-11: Add a plugin-annobin subpackage (#2067150)


author: Robert Scheck <robert@fedoraproject.org> 8.5.0-15
changelog:
  - backport from 8.5.0-15: backport straight-line-speculation mitigation (#2108721)
  - backport from 8.5.0-14: backport std::regex check for invalid range (#2001788)


author: Robert Scheck <robert@fedoraproject.org> 8.5.0-17
changelog:
  - backport from 8.5.0-17: fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - backport from 8.5.0-17: initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - backport from 8.5.0-17: reject std::make_shared<T[]> (PR libstdc++/99006)
  - backport from 8.5.0-16: avoid changing PHIs in GIMPLE split_edge (#2117838)


author: Robert Scheck <robert@fedoraproject.org> 8.5.0-20
changelog:
  - backport from 8.5.0-21: guard the bit test merging code in if-combine (RHEL-11483)
  - backport from 8.5.0-20: fix for TLSLD references (#2213753)
  - backport from 8.5.0-20: fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
  - backport from 8.5.0-20: adjust a pattern in s390.md (PR target/87723, #2214847)


author: Nikola Forró <nforro@redhat.com> - 5.13.3-10
changelog:
  - Backport patch: push_notification_changed_files.patch from upstream commits:
      - f9a2d7d3fb7084374063b70b455f93ba5a421fd1
      - 9be5b2dc8c057778262700251584ce38b8338d16
  - Backport patch: user_token_pr_update_acl.patch from upstream commit:
      - 133da07764314a73452487603f6f509b05f96204


author: Nikola Forró <nforro@redhat.com> - 5.13.3-13
changelog:
  - Backport patch: push_notification_pr_id.patch from upstream commit: 8ed510d99c9fbe3736c96b751d567891cbad343a
  - Backport patch: user_token_pr_close_acl.patch from upstream commit: 661557f3ecab5630e083ae498a54398ca3b5f007


author: Maja Massarini <mmassari@redhat.com> - 5.13.3-14
changelog:
  - Backport patch: owner_of_a_pr_can_update_is_own_pr.patch from upstream commit: a3cd8f60bc7f7c8f29f1ce0f0737c2778bb839d2
  - Backport patch: allow_author_to_update_pr_but_not_to_change_assignee.patch from upstream commit: c8ea20215862e8ea8611fec66e1a386aff91c65c
  - Backport patch: fix_pagure_lib_git_get_changed_files.patch from upstream commit: 1b36cb8e32bab2fac9d5a51a374522069b537342


author: Dominik Wombacher <dominik@wombacher.cc> - 5.14.1-1
changelog:
  - Update to new release 5.14.1
  - Includes all previously backported patches
  - Fixes rhbz#2277121, rhbz#2278745, rhbz#2279411, rhbz#2280725, rhbz#2280723, rhbz#2280728, rhbz#2280726


author: Dominik Wombacher <dominik@wombacher.cc> - 5.14.1-2
changelog:
  - Backport patches to fix issues on EL8 (https://pagure.io/pagure/pull-request/5486)
  - fix(5.14.x): Use '==' instead of 'is' in template if condition because of old Jinja2 version on EL8
  - fix(oidc): Edge case, avoid 'KeyError' after pagure update if a cached session is used


author: blinxen <h-k-81@hotmail.com> - 1:1.2024.0-4
changelog:
  - Patch out Class-Path attribute in build.xml See
    https://docs.fedoraproject.org/en-US/packaging-
    guidelines/Java/#_no_class_path_in_manifest_mf


author: Robert Scheck <robert@fedoraproject.org> 4.4-11
changelog:
  - Add patch to remove unused import of deprecated Python
    asyncore.dispatcher (#2238120, thanks to Patrick Scheck)


author: Peter Bieringer <pb@bieringer.de> - 3.1.7-37
changelog:
  - Add radicale-disable-timestamp-if-started-by-systemd-PR-1276.patch
  - Fix still unsolved SELinux issues (#2156633)
  - Add radicale-fix-move-behind-proxy-PR-1271.patch


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-38
changelog:
  - Replace PR-1271 and PR-1276 with patch against upstream 6ae831a3
  - Extend SELinux policy to allow native journald logging
  - Update to 3.1.8


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-51
changelog:
  - Move bundled required modules to USER_SITE directory
  - Disable bundled dateutil (EPEL provides now 2.8.2)
  - Remove cases for radicale major version 1 and 2
  - Move binaries to libexec and create a wrapper script
  - Align systemd unit file with f38
  - Fix __requires_exclude and fix/add "Requires" entries


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-53
changelog:
  - Update patch release/upstream to d7ce2f0b (2023-04-22)
  - Add radicale-3.1.8-fix-main-component-PR-1252.patch
  - Partially align spec file with Fedora variant


author: Peter Bieringer <pb@bieringer.de> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - EL8: update bundled vobject to 0.9.7
  - EL8: update to Python 3.9 (requires update with option --allowerasing)
  - EL8: reenable bundled dateutil (required by Python 3.9)


author: Peter Bieringer <pb@bieringer.de> - 3.2.0-4
changelog:
  - EL8: blacklist "pika" (required for 'rabbitmq' hook)
  - EL8: fix require-exclude for bundled dateutil


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.63
   - Support for snap services to show the current status of user
     services (experimental)
   - Refresh app awareness: record snap-run-inhibit notice when
     starting app from snap that is busy with refresh (experimental)
   - Refresh app awareness: use warnings as fallback for desktop
     notifications (experimental)
   - Aspect based configuration: make request fields in the aspect-
     bundle's rules optional (experimental)
   - Aspect based configuration: make map keys conform to the same
     format as path sub-keys (experimental)
   - Aspect based configuration: make unset and set behaviour similar
     to configuration options (experimental)
   - Aspect based configuration: limit nesting level for setting value
     (experimental)
   - Components: use symlinks to point active snap component revisions
   - Components: add model assertion support for components
   - Components: fix to ensure local component installation always gets
     a new revision number
   - Add basic support for a CIFS remote filesystem-based home
     directory
   - Add support for AppArmor profile kill mode to avoid snap-confine
     error
   - Allow more than one interface to grant access to the same API
     endpoint or notice type
   - Allow all snapd service's control group processes to send systemd
     notifications to prevent warnings flooding the log
   - Enable not preseeded single boot install
   - Update secboot to handle new sbatlevel
   - Fix to not use cgroup for non-strict confined snaps (devmode,
     classic)
   - Fix two race conditions relating to freedesktop notifications
   - Fix missing tunables in snap-update-ns AppArmor template
   - Fix rejection of snapd snap udev command line by older host snap-
     device-helper
   - Rework seccomp allow/deny list
   - Clean up files removed by gadgets
   - Remove non-viable boot chains to avoid secboot failure
   - posix_mq interface: add support for missing time64 mqueue syscalls
     mq_timedreceive_time64 and mq_timedsend_time64
   - password-manager-service interface: allow kwalletd version 6
   - kubernetes-support interface: allow SOCK_SEQPACKET sockets
   - system-observe interface: allow listing systemd units and their
     properties
   - opengl interface: enable use of nvidia container toolkit CDI
     config generation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.40.20240208gitb7cf124
changelog:
  - Update to 0^20240208gitb7cf124
  - stb_image-devel is updated to 2.29
  - stb_image_resize2-devel is updated to 2.05


author: Bojan Smojver <bojan@rexursive.com> - 0.9.19-5
changelog:
  - Insert glamoregl module into xorg.conf for glamor package
  - Add missed Xorg server dependencies into glamor package


