# changelog

author: Justin M. Forbes <jforbes@fedoraproject.org> [6.11.1-0]
changelog:
  - media: qcom: camss: Fix ordering of pm_runtime_enable (Bryan O'Donoghue)
  - media: qcom: camss: Remove use_count guard in stop_streaming (Bryan O'Donoghue)
  - arm64: dts: allwinner: a64: Add GPU thermal trips to the SoC dtsi (Dragan Simic)
  - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (Dragan Simic)
  - arm64: dts: qcom: sc8280xp-x13s: Enable RGB sensor (Bryan O'Donoghue)
  - ARM: dts: bcm2837/bcm2712: adjust local intc node names (Stefan Wahren)
  - arm64: dts: broadcom: Add minimal support for Raspberry Pi 5 (Andrea della Porta)
  - Linux v6.11.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.11.3-0]
changelog:
  - Add bugs to BugsFixed (Justin M. Forbes)
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Basavaraj Natikar)
  - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts (Ping-Ke Shih)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - configs: fedora/x86: Set CONFIG_CRYPTO_DEV_CCP_DD=y (Hans de Goede)
  - common: arm64: build in some SCMI options (Peter Robinson)
  - common: Cleanup ARM_SCMI_TRANSPORT options (Peter Robinson)
  - Another BugsFixed entry (Justin M. Forbes)
  - Add bug to BugsFixed (Justin M. Forbes)
  - Turn on ZRAM_WRITEBACK for Fedora (Justin M. Forbes)
  - Config updates for 6.11.3 (Justin M. Forbes)
  - Linux v6.11.3


author: Augusto Caringi <acaringi@redhat.com> [6.11.5-0]
changelog:
  - Revert "fedora/configs: enable GPIO expander drivers" (Justin M. Forbes)
  - Add bluetooth bzs to BugsFixed (Justin M. Forbes)
  - Bluetooth: btusb: Fix not being able to reconnect after suspend (Luiz Augusto von Dentz)
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
  - Linux v6.11.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.11.9-100]
changelog:
  - Turn off libbpf dynamic for perf on F39 (Justin M. Forbes)
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)


author: Omair Majid <omajid@redhat.com> - 8.0.103-1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Add dotnet.macros with %dotnet_runtime_arch and %dotnet_runtime_id


author: Simone Caronni <negativo17@gmail.com> - 1.1.17^20240918git845568c-1
changelog:
  - Update to latest snapshot.
  - Switch to more recent packaging guidelines for snapshot versions.
  - Move egl-gbm ICD to egl-gbm package.


author: Jan Grulich <jgrulich@redhat.com> - 130.0.1-3
changelog:
  - Fix PipeWire camera support enablement for F41+
  - Additional WebRTC backports for PipeWire camera support


author: Martin Stransky <stransky@redhat.com> - 131.0-2
changelog:
  - Fix regression from mzbz#1634961 - enable Gnome Shell search in opened tabs
  - Temporary disabled PGO due to build issues.


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Packit <hello@packit.dev> - 13.12-1
changelog:
  - Code cleanup (Martin Tůma)
  - Fixed broken TMS maps rendering (Martin Tůma)
  - Asynchronous rendering of online vector maps (Martin Tůma)
  - Added support for online vector maps overzoom (Martin Tůma)
  - Limit the overzoom to max 3 levels (Martin Tůma)
  - Added support for MVT overzoom (Martin Tůma)
  - Code cleanup (Martin Tůma)
  - Provide the zoom level to QImageReader when fetching the tile size (Martin Tůma)
  - Cosmetics (Martin Tůma)
  - Added workaround for broken Qt SVG image plugin colliding with the MVT plugin (Martin Tůma)
  - Translated using Weblate (Ukrainian) (Vadym Nekhai)
  - Translated using Weblate (Esperanto) (Nikolay Korotkiy)
  - Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
  - Translated using Weblate (Russian) (Nikolay Korotkiy)
  - Translated using Weblate (Finnish) (Nikolay Korotkiy)
  - Fixed possible double delete (Martin Tůma)
  - Improved error reporting (Martin Tůma)
  - Fixed crash on empty MBTiles files (Martin Tůma)
  - Version++ (Martin Tůma)
  - Metadata update (Martin Tůma)
  - Translated using Weblate (Catalan) (raf)
  - Translated using Weblate (Hungarian) (99 efi)
  - Translated using Weblate (Swedish) (bittin1ddc447d824349b2)
  - Code cleanup (Martin Tůma)
  - Resolves rhbz#2231722


author: Packit <hello@packit.dev> - 13.13-1
changelog:
  - Increase the default pixmap cache size on Android to 384MB (Martin Tůma)
  - Fixed broken map scale (ruler) on HiDPI maps (Martin Tůma)
  - Limit the overzoom by the resulting tile size rather than number of levels (Martin Tůma)
  - Version++ (Martin Tůma)
  - Resolves rhbz#2255189


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.3-1
changelog:
  - crypto: Correctly convert passphrases from Python to C (vtrefny)
  - tests: Minor NVMe HostNQN fixes (tbzatek)
  - nvme: Generate HostID when missing (tbzatek)
  - Always use "--fs ignore" with lvresize (mvollmer)
  - nvme: Use interim buffer for nvme_get_log_sanitize() (tbzatek)
  - fs: Fix memory leak (vtrefny)
  - fs: Fix leaking directories with temporary mounts (vtrefny)
  - tests: Specificy required versions when importing GLib and BlockDev introspection (biebl)
  - tests: Replace deprecated unittest assert calls (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.4-1
changelog:
  - tests: Fix "invalid escape sequence '\#'" warning from Python 3.12 (vtrefny)
  - tests: Fail early when recompilation fails in library_test (vtrefny)
  - lvm-dbus: Replace g_critical calls with bd_utils_log_format (vtrefny)
  - Use log function when calling a plugin function that is not loaded (vtrefny)
  - logging: Default to DEBUG log level if compiled with --enable-debug (vtrefny)
  - nvme: Rework memory allocation for device ioctls (tbzatek)
  - packit: Add configuration for downstream builds (vtrefny)
  - fs: correct btrfs set label description (jvanderwaa)
  - fs: Disable progress for ntfsresize (vtrefny)
  - part: Do not open disk read-write for read only operations (vtrefny)
  - ci: Bump actions/checkout from v3 to v4 (vtrefny)
  - plugins: btrfs: use g_autofree where possible for g_free (jvanderwaa)
  - plugins: use g_autofree for free'ing g_char's (jvanderwaa)
  - spec: Move obsoleted devel subpackages to libblockdev-devel (vtrefny)
  - spec: Obsolete vdo plugin packages (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-1
changelog:
  - tests: Skip some checks for btrfs errors with btrfs-progs 6.6.3 (vtrefny)
  - Fix missing progress initialization in bd_crypto_luks_add_key (vtrefny)
  - fs: Report reason for open() and ioctl() failures (tbzatek)
  - utils: Add expected printf string annotation (tbzatek)
  - lvm-dbus: Avoid using already-freed memory (tbzatek)
  - lvm-dbus: Fix leaking error (tbzatek)
  - python: Add a deepcopy function to our structs (vtrefny)
  - tests: Remove unreliable nvme attribute checks (tbzatek)
  - tests: Use BDPluginSpec constructor in LVM DBus plugin tests (vtrefny)
  - tests: Avoid setting up intermediary loop device for the nvme target (tbzatek)
  - tests: Default to /tmp for create_sparse_tempfile() (tbzatek)
  - part: Fix potential double free when getting parttype (vtrefny)
  - Mark NVDIMM plugin as deprecated since 3.1 (vtrefny)
  - tests: Remove some obsolete rules to skip tests (vtrefny)
  - fs: Add support for getting filesystem min size for NTFS and Ext (vtrefny)
  - fs: Fix allowed UUID for generic mkfs with VFAT (vtrefny)
  - fs: Add a generic function to check for fs info availability (vtrefny)
  - fs: Add a function to check label format for F2FS (vtrefny)
  - swap: Add support for checking label and UUID format (vtrefny)
  - ci: Remove the custom version command for Packit (vtrefny)
  - ci: Manually prepare spec file for Packit (vtrefny)
  - overrides: Remove unused 'sys' import (vtrefny)
  - Add BDPluginSpec constructor and use it in plugin_specs_from_names (vtrefny)
  - Sync spec with downstream (vtrefny)
  - ci: Add an action to compile libblockdev with different compilers (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.1-1
changelog:
  - lvm-dbus: Fix passing size for pvresize over DBus (vtrefny)
  - nvme: Add bd_nvme_is_tech_avail to the API file (vtrefny)
  - tests: Add NVMe controller type checks (tbzatek)
  - tests: Add NVMe persistent discovery controller tests (tbzatek)
  - tests: Fix removing custom LVM devices file (vtrefny)
  - tests: Ignore LVM devices file for non-LVM tests (vtrefny)
  - tests: Manually remove removed PVs from LVM devices file (vtrefny)
  - dm_logging: Annotate redirect_dm_log() printf format (tbzatek)
  - Fix some more occurrences of missing port to G_GNUC_UNUSED (tbzatek)
  - Port to G_GNUC_INTERNAL for controlling symbols visibility (tbzatek)
  - Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined (giulio.benetti)
  - Makefile: Fix bumpver to work with micro versions (vtrefny)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.1
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix snapd riscv64 build
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.2
   - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb
     only)


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66
   - AppArmor prompting (experimental): expand kernel support checks
   - AppArmor prompting (experimental): consolidate error messages and
     add error kinds
   - AppArmor prompting (experimental): grant /v2/snaps/{name} via
     snap-interfaces-requests-control
   - AppArmor prompting (experimental): add checks for duplicate
     pattern variants
   - Registry views (experimental): add handlers that commit (and
     cleanup) registry transactions
   - Registry views (experimental): add a snapctl fail command for
     rejecting registry transactions
   - Registry views (experimental): allow custodian snaps to implement
     registry hooks that modify and save registry data
   - Registry views (experimental): run view-changed hooks only for
     snaps plugging views affected by modified paths
   - Registry views (experimental): make registry transactions
     serialisable
   - Snap components: handle refreshing components to revisions that
     have been on the system before
   - Snap components: enable creating Ubuntu Core images that contain
     components
   - Snap components: handle refreshing components independently of
     snaps
   - Snap components: handle removing components when refreshing a snap
     that no longer defines them
   - Snap components: extend snapd Ubuntu Core installation API to
     allow for picking optional snaps and components to install
   - Snap components: extend kernel.yaml with "dynamic-modules",
     allowing kernel to define a location for kmods from component
     hooks
   - Snap components: renamed component type "test" to "standard"
   - Desktop IDs: support installing desktop files with custom names
     based on desktop-file-ids desktop interface plug attr
   - Auto-install snapd on classic systems as prerequisite for any non-
     essential snap install
   - Support loading AppArmor profiles on WSL2 with non-default kernel
     and securityfs mounted
   - Debian/Fedora packaging updates
   - Add snap debug command for investigating execution aspects of the
     snap toolchain
   - Improve snap pack error for easier parsing
   - Add support for user services when refreshing snaps
   - Add snap remove --terminate flag for terminating running snap
     processes
   - Support building FIPS complaint snapd deb and snap
   - Fix to not use nss when looking up for users/groups from snapd
     snap
   - Fix ordering in which layout changes are saved
   - Patch snapd snap dynamic linker to ignore LD_LIBRARY_PATH and
     related variables
   - Fix libexec dir for openSUSE Slowroll
   - Fix handling of the shared snap directory for parallel installs
   - Allow writing to /run/systemd/journal/dev-log by default
   - Avoid state lock during snap removal to avoid delaying other snapd
     operations
   - Add nomad-support interface to enable running Hashicorp Nomad
   - Add intel-qat interface
   - u2f-devices interface: add u2f trustkey t120 product id and fx
     series fido u2f devices
   - desktop interface: improve integration with xdg-desktop-portal
   - desktop interface: add desktop-file-ids plug attr to desktop
     interface
   - unity7 interface: support desktop-file-ids in desktop files rule
     generation
   - desktop-legacy interface: support desktop-file-ids in desktop
     files rule generation
   - desktop-legacy interface: grant access to gcin socket location
   - login-session-observe interface: allow introspection
   - custom-device interface: allow to explicitly identify matching
     device in udev tagging block
   - system-packages-doc interface: allow reading /usr/share/javascript
   - modem-manager interface: add new format of WWAN ports
   - pcscd interface: allow pcscd to read opensc.conf
   - cpu-control interface: add IRQ affinity control to cpu_control
   - opengl interface: add support for cuda workloads on Tegra iGPU in
     opengl interface


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66.1
   - AppArmor prompting (experimental): Fix kernel prompting support
     check
   - Allow kernel snaps to have content slots
   - Fix ignoring snaps in try mode when amending


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.9-1
changelog:
  - Version 254.9
  - Fixes kernel-install on /boot on btrfs (rhbz#2251262)
  - Various small fixes for systemd itself, systemd-resolved, bootctl,
    systemd-networkd, udev, systemd-repart, systemd-homed, libsystemd,
    virtualization detection, systemd-analyze, systemd-dissect, systemd-
    journal-remote, documentation.
  - Hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.12-1
changelog:
  - Version 254.12
  - Too many small bugfixes too list.
  - Updates to hwdb from 2024-04-08 in upstream.
  - Resolves rhbz#2269506.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.16-1
changelog:
  - Version 254.16
  - Fixes for systemd, systemd-resolved, man pages and other documentation,
    unit installation
  - Hardware db update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.18-1
changelog:
  - Version 254.18
  - Various small fixes in man components, incl. systemd-resolved, systemd-
    boot, virtualization detection, kernel-install.
  - Includes a hardward database update.


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  	(#2314784)
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]
  	(#2314783)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-1
changelog:
  - update to xen-4.17.5
    remove or adjust patches now included or superceded upstream
    now need to enable systemd explicitly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-3
changelog:
  - Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818]
  - libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]


