# changelog

author: Than Ngo <than@redhat.com> - 125.0.6422.60-1
changelog:
  - update to 125.0.6422.60
    * High CVE-2024-4947: Type Confusion in V8
    * High CVE-2024-4948: Use after free in Dawn
    * Medium CVE-2024-4949: Use after free in V8
    * Low CVE-2024-4950: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 125.0.6422.76-1
changelog:
  - fix bz#2282246, update to 125.0.6422.76
    * High CVE-2024-5157: Use after free in Scheduling
    * High CVE-2024-5158: Type Confusion in V8
    * High CVE-2024-5159: Heap buffer overflow in ANGLE
    * High CVE-2024-5160: Heap buffer overflow in Dawn
  - cleanup


author: Than Ngo <than@redhat.com> - 125.0.6422.141-1
changelog:
  - update to 125.0.6422.141
    * High CVE-2024-5493: Heap buffer overflow in WebRTC
    * High CVE-2024-5494: Use after free in Dawn
    * High CVE-2024-5495: Use after free in Dawn
    * High CVE-2024-5496: Use after free in Media Session
    * High CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
    * High CVE-2024-5498: Use after free in Presentation API
    * High CVE-2024-5499: Out of bounds write in Streams API
  - fixed rhbz#2264332 - Chromium is unable to send/receive video on MS Teams
  - cleanup chromium.conf


author: Sandro <devel@penguinpee.nl> - 3.0.12-7
changelog:
  - Apply security patches
  - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288)
  - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292)
  - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296)


author: Steve Cossette <farchord@gmail.com> - 0.5.11-1
changelog:
  - Update to 0.5.11:
  - Fix for some installers commands exiting with return code 256
  - Change shortcut for show/hide installed games to Ctrl + i
  - Show/hide hidden games is assigned to Ctrl + h
  - Install game launcher before login for services that use one.
  - Add Amazon Games integration
  - Added SheepShaver, BasiliskII and Mini vMac runners
  - Don't perform runtime updates when a game is launched via a shortcut
  - Support variables in script URLs
  - Fix crash when Lutris is unable to read the screen resolution
  - Enable Gamescope on Nvidia >= 515
  - Fixes for Steam shortcuts
  - Add Gnome Console and Deepin Terminal to supported terminal emulators
  - Fix crash when Mangohud is used alongside Gamescope
  - Translation updates


author: Steve Cossette <farchord@gmail.com> - 0.5.12-1
changelog:
  - Add support for Xbox games with the xemu runner
  - Fix authentication issue with Origin
  - Fix authentication issue with EGS
  - Fix authentication issue with Ubisoft Connect when 2FA is enabled
  - Fix integration issue with GOG
  - Add Discord Rich Presence integration
  - Add ability to extract icons from Windows executables
  - Allow setting custom cover art
  - Re-style configuration dialogs


author: blinxen <h-k-81@hotmail.com> - 1:1.2024.0-4
changelog:
  - Patch out Class-Path attribute in build.xml See
    https://docs.fedoraproject.org/en-US/packaging-
    guidelines/Java/#_no_class_path_in_manifest_mf


author: Robert Scheck <robert@fedoraproject.org> 4.4-11
changelog:
  - Add patch to remove unused import of deprecated Python
    asyncore.dispatcher (#2238120, thanks to Patrick Scheck)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-1
changelog:
  - Update to 1.8.0 (close RHBZ#1466314)
  - Update License to SPDX
  - Port to pyproject-rpm-macros (new Python guidelines)
  - Package additional text documentation files
  - Remove dependency on deprecated python-mock package
  - Add a man page, generated with help2man


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2259758)
  - Patch out the zopfli binary, which conflicts with the one provided by the
    zopfli package


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.63
   - Support for snap services to show the current status of user
     services (experimental)
   - Refresh app awareness: record snap-run-inhibit notice when
     starting app from snap that is busy with refresh (experimental)
   - Refresh app awareness: use warnings as fallback for desktop
     notifications (experimental)
   - Aspect based configuration: make request fields in the aspect-
     bundle's rules optional (experimental)
   - Aspect based configuration: make map keys conform to the same
     format as path sub-keys (experimental)
   - Aspect based configuration: make unset and set behaviour similar
     to configuration options (experimental)
   - Aspect based configuration: limit nesting level for setting value
     (experimental)
   - Components: use symlinks to point active snap component revisions
   - Components: add model assertion support for components
   - Components: fix to ensure local component installation always gets
     a new revision number
   - Add basic support for a CIFS remote filesystem-based home
     directory
   - Add support for AppArmor profile kill mode to avoid snap-confine
     error
   - Allow more than one interface to grant access to the same API
     endpoint or notice type
   - Allow all snapd service's control group processes to send systemd
     notifications to prevent warnings flooding the log
   - Enable not preseeded single boot install
   - Update secboot to handle new sbatlevel
   - Fix to not use cgroup for non-strict confined snaps (devmode,
     classic)
   - Fix two race conditions relating to freedesktop notifications
   - Fix missing tunables in snap-update-ns AppArmor template
   - Fix rejection of snapd snap udev command line by older host snap-
     device-helper
   - Rework seccomp allow/deny list
   - Clean up files removed by gadgets
   - Remove non-viable boot chains to avoid secboot failure
   - posix_mq interface: add support for missing time64 mqueue syscalls
     mq_timedreceive_time64 and mq_timedsend_time64
   - password-manager-service interface: allow kwalletd version 6
   - kubernetes-support interface: allow SOCK_SEQPACKET sockets
   - system-observe interface: allow listing systemd units and their
     properties
   - opengl interface: enable use of nvidia container toolkit CDI
     config generation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240208gitb7cf124-1
changelog:
  - Update to 0^20240208gitb7cf124
  - stb_image-devel is updated to 2.29
  - stb_image_resize2-devel is updated to 2.05


author: Bojan Smojver <bojan@rexursive.com> - 0.9.19-5
changelog:
  - Insert glamoregl module into xorg.conf for glamor package
  - Add missed Xorg server dependencies into glamor package


