# changelog

author: Than Ngo <than@redhat.com> - 122.0.6261.94-1
changelog:
  - upstream security release 122.0.6261.94
    * High : Type Confusion in V8
  - fixed bz#2265957, added correct platform in chromium use agent


author: Than Ngo <than@redhat.com> - 122.0.6261.111-1
changelog:
  - upstream security release 122.0.6261.111
     * High CVE-2024-2173: Out of bounds memory access in V8 
     * High CVE-2024-2174: Inappropriate implementation in V8
     * High CVE-2024-2176: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 122.0.6261.128-1
changelog:
  - upstream security release 122.0.6261.128
     * High CVE-2024-2400: Use after free in Performance Manager


author: Than Ngo <than@redhat.com> - 123.0.6312.58-1
changelog:
  - update to 123.0.6312.58
     * High CVE-2024-2625: Object lifecycle issue in V8
     * Medium CVE-2024-2626: Out of bounds read in Swiftshader
     * Medium CVE-2024-2627: Use after free in Canvas
     * Medium CVE-2024-2628: Inappropriate implementation in Downloads
     * Medium CVE-2024-2629: Incorrect security UI in iOS
     * Medium CVE-2024-2630: Inappropriate implementation in iOS
     * Low CVE-2024-2631: Inappropriate implementation in iOS


author: Than Ngo <than@redhat.com> - 123.0.6312.58-2
changelog:
  - fixed bz#2269768 - enable build ppc64le package for F40
  - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date
  - fixed bz#2271183 - disable screen ai service


author: Than Ngo <than@redhat.com> - 123.0.6312.86-2
changelog:
  - update to 123.0.6312.86
    * Critical CVE-2024-2883: Use after free in ANGLE
    * High CVE-2024-2885: Use after free in Daw
    * High CVE-2024-2886: Use after free in WebCodecs
    * High CVE-2024-2887: Type Confusion in WebAssembly


author: Than Ngo <than@redhat.com> - 123.0.6312.105-1
changelog:
  - update to 123.0.6312.105
    * High CVE-2024-3156: Inappropriate implementation in V8
    * High CVE-2024-3158: Use after free in Bookmarks
    * High CVE-2024-3159: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 123.0.6312.122-1
changelog:
  - update to 123.0.6312.122
    * High CVE-2024-3157: Out of bounds write in Compositing
    * High CVE-2024-3516: Heap buffer overflow in ANGLE
    * High CVE-2024-3515: Use after free in Dawn


author: Michel Lind <salimma@fedoraproject.org> - 2.1.9-2
changelog:
  - Fix build on Koji - disabling test that fails due to permission issue
  - Run pyproject_check_import
  - Remove setup.py that was accidentally shipped


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Miroslav Suchý <msuchy@redhat.com> 1.36-1
changelog:
  - new license: TCP-wrappers
  - new license: LicenseRef-Not-Copyrightable
  - new license: SAX-PD-2.0
  - new license: radvd


author: Miroslav Suchý <msuchy@redhat.com> 1.37-1
changelog:
  - add license HPND-Kevlin-Henney
  - add license FSFAP-no-warranty-disclaimer
  - add not allowed license LicenseRef-Nikto
  - add LicenseRef-Fedora-Firmware


author: Miroslav Suchý <msuchy@redhat.com> 1.38-1
changelog:
  - add GPL-2.0-or-later WITH Bison-exception-1.24
  - Add Unicode-3.0 license
  - Add ISC-Veillard license
  - Add mailprio license
  - Add BSD-Systemics-W3Works license
  - Modify .reuse/dep5
  - Add UltraPermissive notices for libmtp
  - public domain dedication for rwhoisd
  - public domain dedication for openshadinglanguage
  - public domain dedication for remind


author: Miroslav Suchý <msuchy@redhat.com> 1.39-1
changelog:
  - add LicenseRef-docbook-dtds
  - public domain dedication for iw
  - add HPND-MIT-disclaimer
  - add Caldera-no-preamble
  - Delete TOML files for licenses that cannot be found
  - Add xkeyboard-config-Zinoviev
  - Add Adobe-Display-Postscript
  - Add DEC-3-Clause
  - Add HPND-sell-MIT-disclaimer-xserver
  - add not allowed license LicenseRef-sph2pipe
  - add LGPL-2.1-or-later WITH GNU-compiler-exception
  - GNU-compiler-exception: GPL-3.0 -> GPL-2.0
  - firmware.txt: add license for microcode_ctl
  - firmware.txt: remove trailing whitespace
  - public domain dedication for jansson


author: Miroslav Suchý <msuchy@redhat.com> 1.40-1
changelog:
  - add HPND-UC
  - add GPL-2.0-or-later WITH GStreamer-exception-2008
  - add TGPPL-1.0 (and replace LicenseRef-TGPPL)


author: Miroslav Suchý <msuchy@redhat.com>
changelog:
  - add Sun-PPP license
  - add CC-BY-SA-3.0 WITH GNOME-examples-exception license
  - add GPL-2.0-or-later WITH Gmsh-exception license
  - add HPND-Fenneberg-Livingston license
  - add Brian-Gladman-2-Clause license
  - add gtkbook license
  - add UMich-Merit license
  - add Mackerras-3-Clause license
  - Add legacy name for "LGPL-3.0-or-later WITH openvpn-openssl-exception"
  - add softSurfer license
  - add LGPL-2.1-or-later WITH GStreamer-exception-2005 license
  - add UltraPermissive notice for libpng and perl-Image-PNG-Libpng
  - add BSD-3-Clause-acpica license
  - add SSLeay-standalone license
  - add BSD-2-Clause-Darwin license


author: Miroslav Suchý <msuchy@redhat.com>
changelog:
  - add CMU-Mach-nodoc license
  - add Mackerras-3-Clause-acknowledgment license
  - add bcrypt-Solar-Designer license
  - add HPND-INRIA-IMAG license
  - add OpenVision license
  - public domain dedications for irssi
  - add MIT-Khronos-old license
  - public domain dedications for openshadinglanguage
  - public domain dedication for util-linux
  - public domain dedications for rrdtool
  - public domain dedications for ppp
  - Add public domain text from minicom
  - add GPL-3.0-or-later WITH Autoconf-exception-generic


author: Miroslav Suchý <msuchy@redhat.com> 1.43-1
changelog:
  - rename LicenseRef-Threeparttable to threeparttable
  - Add “KST32B” license terms to UltraPermissive.txt
  - Add glibc public domain declarations


author: Miroslav Suchý <msuchy@redhat.com> 1.44-1
changelog:
  - add OAR License
  - include dictd md5 public domain text
  - public domain dedication for libdstr
  - Add LicenseRef-RSALv2 (not-allowed)
  - add swig to UltraPermissive
  - add LGPL-3.0-or-later WITH WxWindows-exception-3.1


author: Miroslav Suchý <msuchy@redhat.com> 1.45-1
changelog:
  - Update public-domain-text.txt for OpenCTM
  - lark-parser was renamed to lark, allow both
  - public domain dedication for libtcd
  - public domain dedication for mopac7
  - Public domain for sshguard
  - public domain dedication for tcd-utils
  - public domain dedication for minicom
  - add LicenseRef-Catharon license


author: blinxen <h-k-81@hotmail.com> - 24.03-2
changelog:
  - Exclude %{ix86} arches since the build fails with "LLVM ERROR: out of
    memory Allocation failed error"


author: Lukas Javorsky <ljavorsk@redhat.com> - 2.7.6-5
changelog:
  - Rebuilt for minizip-ng transition Fedora change
  - Fedora Change: https://fedoraproject.org/wiki/Changes/MinizipNGTransition


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.2.1-1
changelog:
  - Update to 9.2.1 (close RHBZ#2273352, fix CVE-2024-27982)
  - Switch from xz to zstd compression for the “dev” bundle archive


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-3
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: David Abdurachmanov <davidlt@rivosinc.com> - 16.0.6-9
changelog:
  - Add support for riscv64
  - Fix build error: '/usr/bin/ld: bad -plugin-opt option' on riscv64.
  - Lower memory consumption on riscv64
  - Disable LTO (ld.gold not supported on riscv64)


author: Steve Cossette <farchord@gmail.com> - 0.5.10.1-4
changelog:
  - Added some missing GUI package recommended packages:
  - Recommendations: p7zip, curl, fluid-soundfont-gs (For MIDI playback -- other soundfonts can be substituted)


author: Steve Cossette <farchord@gmail.com> - 0.5.11-1
changelog:
  - Update to 0.5.11:
  - Fix for some installers commands exiting with return code 256
  - Change shortcut for show/hide installed games to Ctrl + i
  - Show/hide hidden games is assigned to Ctrl + h
  - Install game launcher before login for services that use one.
  - Add Amazon Games integration
  - Added SheepShaver, BasiliskII and Mini vMac runners
  - Don't perform runtime updates when a game is launched via a shortcut
  - Support variables in script URLs
  - Fix crash when Lutris is unable to read the screen resolution
  - Enable Gamescope on Nvidia >= 515
  - Fixes for Steam shortcuts
  - Add Gnome Console and Deepin Terminal to supported terminal emulators
  - Fix crash when Mangohud is used alongside Gamescope
  - Translation updates


author: Steve Cossette <farchord@gmail.com> - 0.5.12-1
changelog:
  - Add support for Xbox games with the xemu runner
  - Fix authentication issue with Origin
  - Fix authentication issue with EGS
  - Fix authentication issue with Ubisoft Connect when 2FA is enabled
  - Fix integration issue with GOG
  - Add Discord Rich Presence integration
  - Add ability to extract icons from Windows executables
  - Allow setting custom cover art
  - Re-style configuration dialogs


author: Pavel Raiskup <praiskup@redhat.com> 38.5-1
changelog:
  - drop includepkgs=devtoolset* from centos-{6,7} (orion@nwra.com)
  - Fedora 35 and 36 is EOL
  - remove useradd specific changes in configs - it is not needed for Mock 4+
  - openSUSE i586 has been moved out of the main repo into a port (f_krull@gmx.de)


author: Pavel Raiskup <praiskup@redhat.com> 38.6-1
changelog:
  - use python3 macro for post scriptlet (mroche@omenos.dev)
  - openEuler: use metalinks instead of baseurls (chenzeng2@huawei.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.1-1
changelog:
  - Add openSUSE Leap 15.5 (neal@gompa.dev)
  - Move openSUSE Leap 15.3 to EOL (neal@gompa.dev)
  - Mageia 9 branched, Mageia Cauldron retargeted to Mageia 10 (neal@gompa.dev)


author: Pavel Raiskup <praiskup@redhat.com> 39.2-1
changelog:
  - Switch ELN to use a native bootstrap container image
  - Use the correct openSUSE Backports key for Leap 15.5 (neal@gompa.dev)
  - Properly handle /etc/mock/default.cfg on Fedora ELN (sbonazzo@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.3-1
changelog:
  - Fedora 40+ to use DNF5 for building
  - Mandriva provides python-* not python3-* packages, use them
  - mark ELN bootstrap image as "ready" to speedup bootstrap preparation


author: Pavel Raiskup <praiskup@redhat.com> 39.4-1
changelog:
  - configure system_cachedir for dnf5
  - configs: EOL Fedora 37
  - config: add README.md with maintainers and issue trackers (frostyx@email.cz)


author: Pavel Raiskup <praiskup@redhat.com> 40.1-1
changelog:
  - new '{{ repo_arch }}' template variable used for Mageia
  - Mageia 7 is EOL (wally@mageia.org)
  - OpenMandriva i686 is EOL (frostyx@email.cz)
  - Fedora 40 branched


author: Jakub Kadlcik <frostyx@email.cz> 40.3-1
changelog:
  - Add initial c10s mock configs (Koji BUILDROOT only) (miro@hroncok.cz)
  - configs: use repo_arch, not target_arch with openSUSE (praiskup@redhat.com)
  - configs: Drop modular repositories from Fedora Branched
    (ngompa@fedoraproject.org)
  - configs: Drop modular repositories from Fedora Rawhide
    (ngompa@fedoraproject.org)
  - Configs 40.2 release notes && post-release administrivia
    (praiskup@redhat.com)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.18.0-1
changelog:
  - Update to version 6.18.0
  - Run autoreconf during build (following upstream)
  - Drop xmlsec related patches accepted upstream


author: Packit <hello@packit.dev> - 0.84.0-1
changelog:
  - We have adjusted how we include the resolved bugzillas in the commit messages created when syncing the release downstream so that the resolved bugzillas are included in changelog when using %autochangelog. (#2126)
  - Packit now properly cleans up the branch after syncing the release which should prevent unwanted files (e.g.tarballs) being committed in dist-git. (#2125)
  - Packit no longer accepts `packit.json` or `.packit.json` as a configuration file name. (#2123)
  - Packit now updates ACL of a dist-git fork when creating dist-git PRs to allow users and groups with commit rights to the original dist-git repo to push directly to a source branch. (#2112)
  - We have fixed an issue that prevented you from running the jobs on the GitLab.com due to failing resolution of the upstream/downstream relationship for the cloned project. (#2120)
  - We have fixed an issue that you could encounter when running the Packit from the CLI that caused misinterpretation of the repository to be an upstream repo instead of a downstream. (#2117)
  - Resolves rhbz#2244381


author: Packit <hello@packit.dev> - 0.86.2-1
changelog:
  - Packit _0.86.1_ was not released on PyPI due to an internal bug, it should be fixed in this release.
  - Resolves rhbz#2247071


author: Packit <hello@packit.dev> - 0.87.0-1
changelog:
  - Packit now correctly sets the specfile content (e.g. changelog entry) even if it syncs the specfile from upstream the first time. (#2170)
  - Packit now supports pre-release version in `propose_downstream` and `pull_from_upstream`. A spec file update might be required, see the documentation for more details. (#2149)
  - Resolves rhbz#2251367


author: Packit <hello@packit.dev> - 0.87.1-1
changelog:
  - Packit now links the information related to upstream in PRs opened when syncing a release. (#2173)
  - Resolves rhbz#2252328


author: Packit <hello@packit.dev> - 0.89.0-1
changelog:
  - We have fixed a bug in handling chroot-specific configuration once the chroots themselves are updated. (#2194)


author: Packit <hello@packit.dev> - 0.90.0-1
changelog:
  - `pull-from-upstream` and `propose-downstream` commands now have the `--sync-acls` option that enables syncing the ACLs between dits-git repo and fork. The default behaviour was, however, changed to not sync the ACLs. (#2214)
  - Packit now properly handles exceptions when syncing ACLs during release syncing. (#2213)


author: Packit <hello@packit.dev> - 0.93.0-1
changelog:
  - Packit now checks the version to propose against the version in specfile and doesn't create downgrade PRs. (#2239)


author: Packit <hello@packit.dev> - 0.94.0-1
changelog:
  - Added new configuration options `status_name_template` and `allowed_builders`.
  - Resolves rhbz#2266037


author: Packit <hello@packit.dev> - 0.94.2-1
changelog:
  - Packit previously put the "[packit]" string as a prefix in the subject of pull-from-upstream commits. Now the prefix is no longer there - this is made unnecessary noise in autochangelog. This affects the default. Custom action can still override this behavior. (#2263)
  - We have fixed a race condition that could occur when multiple `copr_build` jobs sharing a Copr project but having different targets were running at the same time. (#2274)
  - Resolves: rhbz#2273977


author: blinxen <h-k-81@hotmail.com> - 1:1.2024.0-4
changelog:
  - Patch out Class-Path attribute in build.xml See
    https://docs.fedoraproject.org/en-US/packaging-
    guidelines/Java/#_no_class_path_in_manifest_mf


author: Michel Lind <salimma@fedoraproject.org> - 3.2.25-1
changelog:
  - Update to 3.2.25
  - Mark as deprecated due to EOL
  - Update list of bundled dependencies
  - Declare licenses of bundled dependencies
  - Add virtual Provides and Conflicts to allow swapping Django stacks
  - Drop unneeded patches


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Michal Konečný <mkonecny@redhat.com> - 1.0.0-2
changelog:
  - Bump to 1.0.0-2
  The build 1.0.0-1 is already available in epep9-infra tag. And it doesn't
  let us rebuild.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20231214gitdeb6f40-1
changelog:
  - Update to 0^20231214gitdeb6f40
  - API: document not supported functions
  - Add Py_HashPointer()
  - Update tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240220git52486a9-1
changelog:
  - Update to 0^20240220git52486a9
  - Add PyTime API: `PyTime_t` type, `PyTime_MIN` and `PyTime_MAX` constants,
    `PyTime_AsSecondsDouble()`, `PyTime_Monotonic()`, `PyTime_PerfCounter()`,
    and `PyTime_Time()`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240309git7539c7f-1
changelog:
  - Update to 0^20240309git7539c7f
  - Add hash constants: `PyHASH_BITS`, `PyHASH_IMAG`, `PyHASH_INF`,
    `PyHASH_MODULUS`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240321gitb16ff9a-1
changelog:
  - Update to 0^20240321gitb16ff9a
  - Add `Py_GetConstant()` and `Py_GetConstantBorrowed()`
  - Update `_Py_NULL` for C23


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


