# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.21.0-3
changelog:
  - Do not require pycotap to run PySol, pycotap is only needed for the single
    unittest ( https://github.com/shlomif/PySolFC/pull/353 )


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Miroslav Suchý <msuchy@redhat.com> 1.36-1
changelog:
  - new license: TCP-wrappers
  - new license: LicenseRef-Not-Copyrightable
  - new license: SAX-PD-2.0
  - new license: radvd


author: Miroslav Suchý <msuchy@redhat.com> 1.37-1
changelog:
  - add license HPND-Kevlin-Henney
  - add license FSFAP-no-warranty-disclaimer
  - add not allowed license LicenseRef-Nikto
  - add LicenseRef-Fedora-Firmware


author: Miroslav Suchý <msuchy@redhat.com> 1.38-1
changelog:
  - add GPL-2.0-or-later WITH Bison-exception-1.24
  - Add Unicode-3.0 license
  - Add ISC-Veillard license
  - Add mailprio license
  - Add BSD-Systemics-W3Works license
  - Modify .reuse/dep5
  - Add UltraPermissive notices for libmtp
  - public domain dedication for rwhoisd
  - public domain dedication for openshadinglanguage
  - public domain dedication for remind


author: Miroslav Suchý <msuchy@redhat.com> 1.39-1
changelog:
  - add LicenseRef-docbook-dtds
  - public domain dedication for iw
  - add HPND-MIT-disclaimer
  - add Caldera-no-preamble
  - Delete TOML files for licenses that cannot be found
  - Add xkeyboard-config-Zinoviev
  - Add Adobe-Display-Postscript
  - Add DEC-3-Clause
  - Add HPND-sell-MIT-disclaimer-xserver
  - add not allowed license LicenseRef-sph2pipe
  - add LGPL-2.1-or-later WITH GNU-compiler-exception
  - GNU-compiler-exception: GPL-3.0 -> GPL-2.0
  - firmware.txt: add license for microcode_ctl
  - firmware.txt: remove trailing whitespace
  - public domain dedication for jansson


author: Miroslav Suchý <msuchy@redhat.com> 1.40-1
changelog:
  - add HPND-UC
  - add GPL-2.0-or-later WITH GStreamer-exception-2008
  - add TGPPL-1.0 (and replace LicenseRef-TGPPL)


author: Miroslav Suchý <msuchy@redhat.com>
changelog:
  - add Sun-PPP license
  - add CC-BY-SA-3.0 WITH GNOME-examples-exception license
  - add GPL-2.0-or-later WITH Gmsh-exception license
  - add HPND-Fenneberg-Livingston license
  - add Brian-Gladman-2-Clause license
  - add gtkbook license
  - add UMich-Merit license
  - add Mackerras-3-Clause license
  - Add legacy name for "LGPL-3.0-or-later WITH openvpn-openssl-exception"
  - add softSurfer license
  - add LGPL-2.1-or-later WITH GStreamer-exception-2005 license
  - add UltraPermissive notice for libpng and perl-Image-PNG-Libpng
  - add BSD-3-Clause-acpica license
  - add SSLeay-standalone license
  - add BSD-2-Clause-Darwin license


author: Miroslav Suchý <msuchy@redhat.com>
changelog:
  - add CMU-Mach-nodoc license
  - add Mackerras-3-Clause-acknowledgment license
  - add bcrypt-Solar-Designer license
  - add HPND-INRIA-IMAG license
  - add OpenVision license
  - public domain dedications for irssi
  - add MIT-Khronos-old license
  - public domain dedications for openshadinglanguage
  - public domain dedication for util-linux
  - public domain dedications for rrdtool
  - public domain dedications for ppp
  - Add public domain text from minicom
  - add GPL-3.0-or-later WITH Autoconf-exception-generic


author: Miroslav Suchý <msuchy@redhat.com> 1.43-1
changelog:
  - rename LicenseRef-Threeparttable to threeparttable
  - Add “KST32B” license terms to UltraPermissive.txt
  - Add glibc public domain declarations


author: Miroslav Suchý <msuchy@redhat.com> 1.44-1
changelog:
  - add OAR License
  - include dictd md5 public domain text
  - public domain dedication for libdstr
  - Add LicenseRef-RSALv2 (not-allowed)
  - add swig to UltraPermissive
  - add LGPL-3.0-or-later WITH WxWindows-exception-3.1


author: Miroslav Suchý <msuchy@redhat.com> 1.45-1
changelog:
  - Update public-domain-text.txt for OpenCTM
  - lark-parser was renamed to lark, allow both
  - public domain dedication for libtcd
  - public domain dedication for mopac7
  - Public domain for sshguard
  - public domain dedication for tcd-utils
  - public domain dedication for minicom
  - add LicenseRef-Catharon license


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Lukas Javorsky <ljavorsk@redhat.com> - 2.7.6-5
changelog:
  - Rebuilt for minizip-ng transition Fedora change
  - Fedora Change: https://fedoraproject.org/wiki/Changes/MinizipNGTransition


author: Pavel Raiskup <praiskup@redhat.com> 38.5-1
changelog:
  - drop includepkgs=devtoolset* from centos-{6,7} (orion@nwra.com)
  - Fedora 35 and 36 is EOL
  - remove useradd specific changes in configs - it is not needed for Mock 4+
  - openSUSE i586 has been moved out of the main repo into a port (f_krull@gmx.de)


author: Pavel Raiskup <praiskup@redhat.com> 38.6-1
changelog:
  - use python3 macro for post scriptlet (mroche@omenos.dev)
  - openEuler: use metalinks instead of baseurls (chenzeng2@huawei.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.1-1
changelog:
  - Add openSUSE Leap 15.5 (neal@gompa.dev)
  - Move openSUSE Leap 15.3 to EOL (neal@gompa.dev)
  - Mageia 9 branched, Mageia Cauldron retargeted to Mageia 10 (neal@gompa.dev)


author: Pavel Raiskup <praiskup@redhat.com> 39.2-1
changelog:
  - Switch ELN to use a native bootstrap container image
  - Use the correct openSUSE Backports key for Leap 15.5 (neal@gompa.dev)
  - Properly handle /etc/mock/default.cfg on Fedora ELN (sbonazzo@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.3-1
changelog:
  - Fedora 40+ to use DNF5 for building
  - Mandriva provides python-* not python3-* packages, use them
  - mark ELN bootstrap image as "ready" to speedup bootstrap preparation


author: Pavel Raiskup <praiskup@redhat.com> 39.4-1
changelog:
  - configure system_cachedir for dnf5
  - configs: EOL Fedora 37
  - config: add README.md with maintainers and issue trackers (frostyx@email.cz)


author: Pavel Raiskup <praiskup@redhat.com> 40.1-1
changelog:
  - new '{{ repo_arch }}' template variable used for Mageia
  - Mageia 7 is EOL (wally@mageia.org)
  - OpenMandriva i686 is EOL (frostyx@email.cz)
  - Fedora 40 branched


author: Jakub Kadlcik <frostyx@email.cz> 40.3-1
changelog:
  - Add initial c10s mock configs (Koji BUILDROOT only) (miro@hroncok.cz)
  - configs: use repo_arch, not target_arch with openSUSE (praiskup@redhat.com)
  - configs: Drop modular repositories from Fedora Branched
    (ngompa@fedoraproject.org)
  - configs: Drop modular repositories from Fedora Rawhide
    (ngompa@fedoraproject.org)
  - Configs 40.2 release notes && post-release administrivia
    (praiskup@redhat.com)


author: Michel Lind <salimma@fedoraproject.org> - 0.3-1
changelog:
  - Update to 0.3
  - Prevent invalid fragment values from leading to a buffer overrun
  - Use SPDX license identifier


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.18.0-1
changelog:
  - Update to version 6.18.0
  - Run autoreconf during build (following upstream)
  - Drop xmlsec related patches accepted upstream


author: blinxen <h-k-81@hotmail.com> - 1:1.2024.0-4
changelog:
  - Patch out Class-Path attribute in build.xml See
    https://docs.fedoraproject.org/en-US/packaging-
    guidelines/Java/#_no_class_path_in_manifest_mf


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.80-1
changelog:
  - New version
    Resolves: rhbz#2255025
  - Fixed Terrapin vulnerability in some SSH protocol extensions
    Resolves: CVE-2023-48795


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.81-1
changelog:
  - New version
    Resolves: rhbz#2275179
  - Fixed vulnerability allowing recovery of NIST P-521 private keys
    Resolves: CVE-2024-31497


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


