# changelog

author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.0-1
changelog:
  - Update to version 3.3.0
  - Soname bump for libHepMC3 (3 to 4)
  - Additional build dependencies for tests
  - Fix an uninitialized value issue found by valgrind
  - Drop EPEL7 build (soon to be EOL)
  - Avoid assert due to implicit narrowing cast on 32 bit architectures
  - Suppress a valgrind error on Fedora 39 ppc64le


author: Robert Scheck <robert@fedoraproject.org> 3.18.0-3
changelog:
  - Add the baresip-avcodec, baresip-avfilter, baresip-avformat and
    baresip-swscale subpackages for Fedora and RHEL 9 (and newer)


author: Jakub Kadlcik <frostyx@email.cz> 1.109-1
changelog:
  - Show CHROOT in help output instead of CHROOTS
  - More readable errors related to implicit ownername
  - General check if it makes sense to upload SRPM
  - Describe add-package-custom and edit-package-custom in the manpage
  - Sync --timeout manpage docs with --help output


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - priority=X support for copr DNF repositories added
  - new 'copr-cli download-build --logs' option added
  - make the pyp2spec tool the default PyPI spec generator


author: Pavel Raiskup <praiskup@redhat.com> 1.111-1
changelog:
  - correctly check CoprDir name before uploading large SRPM
  - assign fallback value from self.username
  - fix `copr build` +args --help output
  - typo in --namespace help output


author: Simone Caronni <negativo17@gmail.com> - 1.2.6-12
changelog:
  - Drop ldconfig scriptlets.
  - Be more explicit for files.
  - Use cmake macros everywhere.
  - Small cleanups.
  - Trim changelog.
  - Adjust tests properly.


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Steve Cossette <farchord@gmail.com> - 3.8-1
changelog:
  - Update to 3.8 to fix several CVEs:
  - CVE-2024-48991: Prevent race condition on /proc/$PID/exec evaluation
  - CVE-2024-11003: Drop usage of Module::ScanDeps to prevent LPE.
  - CVE-2024-48990: Do not set PYTHONPATH environment variable to prevent a LPE.
  - CVE-2024-48992: Do not set RUBYLIB environment variable to prevent a LPE.


author: David Sommerseth <davids@openvpn.net> - 2.7-20241212gitbaa9192
changelog:
  - First packaging attempt for EPEL-10 - OpenVPN 2.7 git master snapshot build
  - Update to git master baa9192851006e2dbb90b410011e61ecf2e01870


author: David Sommerseth <dazo@eurephia.org> - 2.7-20250101git6a7931a
changelog:
  - Update to upstream git master commit 6a7931a4a89cb35be7b799942e7fa03fde2cdc63
  - Improvement: Trigger renegotiation of data key if getting close to the AEAD usage limit
  - Improvement: Allow DEFAULT in data-ciphers and report both expanded and user set option
  - Improvement: Support IPv6 towards port-share proxy receiver
  - Improvement: Improve shuffling algorithm of connection list


author: David Sommerseth <dazo@eurephia.org> - 2.7-20250116git6d91eda
changelog:
  - Update to upstream git master commit 6d91eda5a120a4a18273d82fed6777b3efcce8cc
  - Improvement: Remove systemd-ask-password default timeout
  - Improvement: Update --fingerprint documentation
  - Improvement: Do not attempt packet decruption after 2^36 failed decryptions
  - Feature: Prepare for OpenVPN Epoch keys (not yet fully implemented)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.127-1
changelog:
  - Explicitly ask which user checks the permissions
  - Make sure user can build in the project before uploading


author: Pavel Raiskup <praiskup@redhat.com> 1.130-1
changelog:
  - priority=X support added for copr project repositories
  - several forward/backward compat fixes with libs/tooling


author: Jakub Kadlcik <frostyx@email.cz> 1.132-1
changelog:
  - Discourage from deleting objects while paginating over them
  - Suggest pagination only when a GET request timeouts


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2-0.3.git91d1781
changelog:
  - remove Provides and Obsolutes, dnf should automatically remove any transient dependencies by itself
  - remove -r option from  macro pyproject_buildrequires
  - use macro %{pyproject_files} and %pyproject_save_files pyliblo3}
  - remove python3 requirements, because the macro %pyproject_buildrequires is used


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2-0.4.git91d1781
changelog:
  - Use correct source tag address
  - Recompile `.pyx` file
  - Fix permission of NEWS README.md and COPYING


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-1
changelog:
  - Add patch `type-erase lo_blob_dataptr input` for _liblo.pyx
  - Add obsolete for older version of pyliblo
  - Add Requires to doc subpackage


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.8-7
changelog:
  - Use tomllib instead of toml (used only in tests)
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.1-2
changelog:
  - Workaround doxygen non-reproducibility - make doc package noarch again
  - Increase client timeouts for XRootD server tests


author: Zygmunt Krynicki <me@zygoon.pl>
changelog:
  - Re-cherry pick fix for SELinux timedatex problem from upstream
    as it was not released in 2.66.1, sorry.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.67.1
   - Fix apparmor permissions to allow snaps access to kernel modules
     and firmware on UC24, which also fixes the kernel-modules-control
     interface on UC24
   - AppArmor prompting (experimental): disallow /./ and /../ in path
     patterns
   - Fix 'snap run' getent based user lookup in case of bad PATH
   - Fix snapd using the incorrect AppArmor version during undo of an
     refresh for regenerating snap profiles
   - Add new syscalls to base templates
   - hardware-observe interface: allow riscv_hwprobe syscall
   - mount-observe interface: allow listmount and statmount syscalls


author: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
changelog:
  - The changelog date and author have been modified to maintain linearity.
  - Drop 0001-data-selinux-remove-timedatex.patch - applied upstream.
  - New upstream release 2.67
   - AppArmor prompting (experimental): allow overlapping rules
   - Registry view (experimental): Changes to registry data (from both
     users and snaps) can be validated and saved by custodian snaps
   - Registry view (experimental): Support 'snapctl get --pristine' to
     read the registry data excluding staged transaction changes
   - Registry view (experimental): Put registry commands behind
     experimental feature flag
   - Components: Make modules shipped/created by kernel-modules
     components available right after reboot
   - Components: Add tab completion for local component files
   - Components: Allow installing snaps and components from local files
     jointly on the CLI
   - Components: Allow 'snapctl model' command for gadget and kernel
     snaps
   - Components: Add 'snap components' command
   - Components: Bug fixes
   - eMMC gadget updates (WIP): add syntax support in gadget.yaml for
     eMMC schema
   - Support for ephemeral recovery mode on hybrid systems
   - Support for dm-verity options in snap-bootstrap
   - Support for overlayfs options and allow empty what argument for
     tmpfs
   - Enable ubuntu-image to determine the size of the disk image to
     create
   - Expose 'snap debug' commands 'validate-seed' and 'seeding'
   - Add debug API option to use dedicated snap socket /run/snapd-
     snap.socket
   - Hide experimental features that are no longer required
     (accepted/rejected)
   - Mount ubuntu-save partition with no{exec,dev,suid} at install, run
     and factory-reset
   - Improve memory controller support with cgroup v2
   - Support ssh socket activation configurations (used by ubuntu
     22.10+)
   - Fix generation of AppArmor profile with incorrect revision during
     multi snap refresh
   - Fix refresh app awareness related deadlock edge case
   - Fix not caching delta updated snap download
   - Fix passing non root uid, guid to initial tmpfs mount
   - Fix ignoring snaps in try mode when amending
   - Fix reloading of service activation units to avoid systemd errors
   - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS
     updates PPA
   - Make killing of snap apps best effort to avoid possibility of
     malicious failure loop
   - Alleviate impact of auto-refresh failure loop with progressive
     delay
   - Dropped timedatex in selinux-policy to avoid runtime issue
   - Fix missing syscalls in seccomp profile
   - Modify AppArmor template to allow using SNAP_REEXEC on arch
     systems
   - Modify AppArmor template to allow using vim.tiny (available in
     base snaps)
   - Modify AppArmor template to add read-access to debian_version
   - Modify AppArmor template to allow owner to read
     @{PROC}/@{pid}/sessionid
   - {common,personal,system}-files interface: prohibit trailing @ in
     filepaths
   - {desktop,shutdown,system-observe,upower-observe} interface:
     improve for Ubuntu Core Desktop
   - custom-device interface: allow @ in custom-device filepaths
   - desktop interface: improve launch entry and systray integration
     with session
   - desktop-legacy interface: allow DBus access to
     com.canonical.dbusmenu
   - fwupd interface: allow access to nvmem for thunderbolt plugin
   - mpris interface: add plasmashell as label
   - mount-control interface: add support for nfs mounts
   - network-{control,manager} interface: add missing dbus link rules
   - network-manager-observe interface: add getDevices methods
   - opengl interface: add Kernel Fusion Driver access to opengl
   - screen-inhibit-control interface: improve screen inhibit control
     for use on core
   - udisks2 interface: allow ping of the UDisks2 service
   - u2f-devices interface: add Nitrokey Passkey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-12/13060
  - Security fixes: bz#2248564, bz#2281499, bz#2281500, bz#2281502, bz#2281503
  - switch to sysusers based user provisioning approach - fixes bz#2252618
  - Add legacy openssl build dependency from F41 on - fixes FTBS / bz#2301334
  - since we can now drop EL7 support we can also cleanup systemd handling


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-2
changelog:
  - Re-add systemd-devel as build dependency so the daemon knows how to notify systemd that it was started - fixes bz#2302910


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


