# changelog

author: Sérgio Basto <sergio@serjux.com> - 2.21.0-3
changelog:
  - Do not require pycotap to run PySol, pycotap is only needed for the single
    unittest ( https://github.com/shlomif/PySolFC/pull/353 )


author: Sérgio Basto <sergio@serjux.com> - 2.2-2
changelog:
  - Updated the remove of cardsets already included in PySolFC package (PySolFC-Cardsets--Minimal-2.2.0)
  - Convert to SPDX License


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.26-8
changelog:
  - Update python3 patch with changes from upstream
  - Update default paths (/var/run → /run, /var/lock → /run/lock)
  - Update URL and Source tags


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.0.0-1
changelog:
  - Version 6.0.0
  - Drop previously backported patches
  - Use python3 also for EPEL 7 (following upstream)
  - Use systemd unit files from upstream


author: Than Ngo <than@redhat.com> - 122.0.6261.94-1
changelog:
  - upstream security release 122.0.6261.94
    * High : Type Confusion in V8
  - fixed bz#2265957, added correct platform in chromium use agent


author: Than Ngo <than@redhat.com> - 122.0.6261.111-1
changelog:
  - upstream security release 122.0.6261.111
     * High CVE-2024-2173: Out of bounds memory access in V8 
     * High CVE-2024-2174: Inappropriate implementation in V8
     * High CVE-2024-2176: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 122.0.6261.128-1
changelog:
  - upstream security release 122.0.6261.128
     * High CVE-2024-2400: Use after free in Performance Manager


author: Than Ngo <than@redhat.com> - 123.0.6312.58-1
changelog:
  - update to 123.0.6312.58
     * High CVE-2024-2625: Object lifecycle issue in V8
     * Medium CVE-2024-2626: Out of bounds read in Swiftshader
     * Medium CVE-2024-2627: Use after free in Canvas
     * Medium CVE-2024-2628: Inappropriate implementation in Downloads
     * Medium CVE-2024-2629: Incorrect security UI in iOS
     * Medium CVE-2024-2630: Inappropriate implementation in iOS
     * Low CVE-2024-2631: Inappropriate implementation in iOS


author: Than Ngo <than@redhat.com> - 123.0.6312.58-2
changelog:
  - fixed bz#2269768 - enable build ppc64le package for F40
  - fixed bz#2270321 - VAAPI flags in chromium.conf are out of date
  - fixed bz#2271183 - disable screen ai service


author: Than Ngo <than@redhat.com> - 123.0.6312.86-2
changelog:
  - update to 123.0.6312.86
    * Critical CVE-2024-2883: Use after free in ANGLE
    * High CVE-2024-2885: Use after free in Daw
    * High CVE-2024-2886: Use after free in WebCodecs
    * High CVE-2024-2887: Type Confusion in WebAssembly


author: Than Ngo <than@redhat.com> - 123.0.6312.105-1
changelog:
  - update to 123.0.6312.105
    * High CVE-2024-3156: Inappropriate implementation in V8
    * High CVE-2024-3158: Use after free in Bookmarks
    * High CVE-2024-3159: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 123.0.6312.122-1
changelog:
  - update to 123.0.6312.122
    * High CVE-2024-3157: Out of bounds write in Compositing
    * High CVE-2024-3516: Heap buffer overflow in ANGLE
    * High CVE-2024-3515: Use after free in Dawn


author: Ranjan Maitra <aarem@fedoraproject.org>
changelog:
  - 3.0.5-2
  - patched for dillo to use openssl 1.1 using patch provided  by Mattias Ellert <mattias.ellert AT physics DOT uu DOT se> 
  - fixes BZ #1470354


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Drop merged patch
  - Add R and BR to python-keybinder
  - Convert the package to noarch


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.8.1-1
changelog:
  - Update to 0.8.1
  - Backport upstream patch to fix the size of the tab bar
  - Backport upstream patch fixing recovering from full-screen mode


author: Jean-Francois Saucier <jsaucier@gmail.com> - 3.1.2-1
changelog:
  - Update to the new upstream version
  - Added support for postgresql 9.5
  - Removed support for postgresql 8.2


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.3.3-12
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-0.alpha.1
changelog:
  - New upstream version - 0.8.2-alpha1.
  - New segfault issue: https://github.com/pgmodeler/pgmodeler/issues/777


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-0.2.beta
changelog:
  - Create plugins directory to do not complain on start: https://github.com/pgmodeler/pgmodeler/issues/783


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-1
changelog:
  - Update version to release 0.8.2.
  - Fix prerev var usage.
  - Add BR qt5-qtsvg-devel.
  - Use _qt5_qmake_flags macros to honor Fedora build flags, drop old hacks.
  - Step to use find_lang macro for localizations.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-2
changelog:
  - Review request in progress - bz#977116. Thanks to Igor Gnatenko. Changes by comments https://github.com/Hubbitus/Fedora-packaging/commit/d0716a3d152c8d085988944bce7140b8e56f2e64#commitcomment-18686601
  - Use macroses %qmake_qt5 and %make_build.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-4
changelog:
  - Add Requires shared-mime-info
  - Explicit require single logo file.
  - Drop listing %{_libdir}/%{name}/lib*.so twice.
  - Drop provate requires anf provides from '%{_libdir}/%{name}/lib*.so*'


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.3-1
changelog:
  - update to 2.4.3
  - use https in URLs
  - supply native systemd unit
  - drop obsolete patches
  - merge Fedora-specific changes into one patch
  - use system whois client instead of bundled one
  - update (and sort) Requires list
  - tighten file list
  - remove bundled stuff in prep


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.3-2
changelog:
  - fix SELinux policy temporarily (#1040425)
  - document patch purpose and file/dir permissions
  - depend on whois binary, not package
  - verify tarball GPG signature in prep


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.3-3
changelog:
  - EPEL7 install doesn't support -D and -t together
  - EPEL7 SELinux policy update (#1389191)
  - add missing dependencies
  - add dependencies to the systemd unit


author: Neal Gompa <ngompa13@gmail.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Fix license tag to match actual source license
  - Use bconds for controlling build behavior
  - Make compatible with EPEL7


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 4.2.1-1
changelog:
  - Update to 4.2.1 (#1602746).
  - https://github.com/celery/celery/blob/v4.2.1/Changelog
  - Correct documentation license to CC-BY-SA.


author: Neal Gompa <ngompa13@gmail.com> - 4.2.1-2
changelog:
  - Switch celery binary to Python 3 in F30+
  - Switch to bconds for controlling the build
  - Drop unused macro


author: Neal Gompa <ngompa13@gmail.com> - 1:4.2.2-1
changelog:
  - Update to 4.2.2
  - Fix summary for Python 2 subpackage
  - Switch to bconds for controlling the build
  - Add EPEL7 compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9-3
changelog:
  - Python 2 binary package renamed to python2-libpagure
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-11
changelog:
  - Python 2 binary package renamed to python2-straight-plugin
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Benoit <dbenoit@redhat.com> 6.12-7
changelog:
  - Remove hardened build since it is enabled by default
  - Add gcc to BuildRequires
  - Remove wildcards from directory listings in files section


author: David Benoit <dbenoit@redhat.com> 6.12-8
changelog:
  - Annotate dependencies with links to source code
  - Move dependencies to racket-pkgs, since they are only used
    by that subpackage
  - Update mred symbolic links
  - Fix ownership of directories
  - Remove executable bit from starter-sh


author: David Benoit <dbenoit@redhat.com> 7.0-1
changelog:
  - Update sources to Racket v7.0
  - Remove 6.12 patches and add update remove nonfree
    srfi patch to 7.0


author: David Benoit <dbenoit@redhat.com> 7.0-2
changelog:
  - Disable SSE math on i686 until issue is fixed upstream
  - Exclude ppc due to issue building Racket v7.0 and 
    arch being deprecated in next release


author: David Benoit <dbenoit@redhat.com> 7.0-4
changelog:
  - Add scriptlets to handle updating links.rktd based on
    whether racket-pkgs is installed
  - fix owenership of docs dir
  - update docs patch


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


