diff --git a/NEWS.md b/NEWS.md index f16a16902fd..fd905078031 100644 --- a/NEWS.md +++ b/NEWS.md @@ -1,3 +1,13 @@ +# New in snapd 2.74.1 +* FDE: measure DeployedMode and AuditMode variables if they appear as disabled in the event log to avoid a potential reseal-failure boot loop +* LP: #2141328 FDE: reuse preinstall check context during install to account for user-ignored errors +* LP: #2139611 FDE: fix db updates by allowing multiple payloads +* LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising memory lock limit when required +* LP: #2139099 snap-confine: bump the max element count of the BPF map used to store IDs of allowed/matched devices to 1000 +* LP: #2141607 Desktop: revert change that caused user daemons declaring the desktop plug to implicitly depend on graphical-session.target +* Interfaces: Added pidfd_open and memfd_secret to seccomp template +* Interfaces: camera | add locking permission for /dev/video + # New in snapd 2.74 * FDE: use new activation API from secboot * FDE: use activation API also with non keydata keys diff --git a/packaging/arch/PKGBUILD b/packaging/arch/PKGBUILD index a23421d12d8..6420f38e58d 100644 --- a/packaging/arch/PKGBUILD +++ b/packaging/arch/PKGBUILD @@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages." depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'libcap' 'apparmor') optdepends=('bash-completion: bash completion support' 'xdg-desktop-portal: desktop integration') -pkgver=2.74 +pkgver=2.74.1 pkgrel=1 arch=('x86_64' 'i686' 'armv7h' 'aarch64') url="https://github.com/snapcore/snapd" diff --git a/packaging/debian-sid/changelog b/packaging/debian-sid/changelog index 917e341c825..ec86317f0a2 100644 --- a/packaging/debian-sid/changelog +++ b/packaging/debian-sid/changelog @@ -1,3 +1,24 @@ +snapd (2.74.1-1) unstable; urgency=medium + + * New upstream release, LP: #2138629 + - FDE: measure DeployedMode and AuditMode variables if they appear + as disabled in the event log to avoid a potential reseal-failure + boot loop + - LP: #2141328 FDE: reuse preinstall check context during install to + account for user-ignored errors + - LP: #2139611 FDE: fix db updates by allowing multiple payloads + - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising + memory lock limit when required + - LP: #2139099 snap-confine: bump the max element count of the BPF + map used to store IDs of allowed/matched devices to 1000 + - LP: #2141607 Desktop: revert change that caused user daemons + declaring the desktop plug to implicitly depend on graphical- + session.target + - Interfaces: Added pidfd_open and memfd_secret to seccomp template + - Interfaces: camera | add locking permission for /dev/video + + -- Ernest Lotter Thu, 12 Feb 2026 21:27:23 +0200 + snapd (2.74-1) unstable; urgency=medium * New upstream release, LP: #2138629 diff --git a/packaging/fedora/snapd.spec b/packaging/fedora/snapd.spec index 41ec86dfa66..d9b5525ef38 100644 --- a/packaging/fedora/snapd.spec +++ b/packaging/fedora/snapd.spec @@ -114,7 +114,7 @@ %endif Name: snapd -Version: 2.74 +Version: 2.74.1 Release: 0%{?dist} Summary: A transactional software package manager License: GPL-3.0-only @@ -1008,6 +1008,24 @@ fi %endif %changelog +* Thu Feb 12 2026 Ernest Lotter +- New upstream release 2.74.1 + - FDE: measure DeployedMode and AuditMode variables if they appear + as disabled in the event log to avoid a potential reseal-failure + boot loop + - LP: #2141328 FDE: reuse preinstall check context during install to + account for user-ignored errors + - LP: #2139611 FDE: fix db updates by allowing multiple payloads + - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising + memory lock limit when required + - LP: #2139099 snap-confine: bump the max element count of the BPF + map used to store IDs of allowed/matched devices to 1000 + - LP: #2141607 Desktop: revert change that caused user daemons + declaring the desktop plug to implicitly depend on graphical- + session.target + - Interfaces: Added pidfd_open and memfd_secret to seccomp template + - Interfaces: camera | add locking permission for /dev/video + * Tue Jan 20 2026 Ernest Lotter - New upstream release 2.74 - FDE: use new activation API from secboot diff --git a/packaging/opensuse/snapd.changes b/packaging/opensuse/snapd.changes index e6da5361755..37ca1e30e10 100644 --- a/packaging/opensuse/snapd.changes +++ b/packaging/opensuse/snapd.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Thu Feb 12 19:27:23 UTC 2026 - ernest.lotter@canonical.com + +- Update to upstream release 2.74.1 + ------------------------------------------------------------------- Tue Jan 20 16:54:17 UTC 2026 - ernest.lotter@canonical.com diff --git a/packaging/opensuse/snapd.spec b/packaging/opensuse/snapd.spec index 1d1ccf735d2..48cf57fbb58 100644 --- a/packaging/opensuse/snapd.spec +++ b/packaging/opensuse/snapd.spec @@ -100,7 +100,7 @@ Name: snapd -Version: 2.74 +Version: 2.74.1 Release: 0 Summary: Tools enabling systems to work with .snap files License: GPL-3.0 diff --git a/packaging/ubuntu-16.04/changelog b/packaging/ubuntu-16.04/changelog index 14afbedd692..3b92f0bb7e2 100644 --- a/packaging/ubuntu-16.04/changelog +++ b/packaging/ubuntu-16.04/changelog @@ -1,3 +1,24 @@ +snapd (2.74.1) xenial; urgency=medium + + * New upstream release, LP: #2138629 + - FDE: measure DeployedMode and AuditMode variables if they appear + as disabled in the event log to avoid a potential reseal-failure + boot loop + - LP: #2141328 FDE: reuse preinstall check context during install to + account for user-ignored errors + - LP: #2139611 FDE: fix db updates by allowing multiple payloads + - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising + memory lock limit when required + - LP: #2139099 snap-confine: bump the max element count of the BPF + map used to store IDs of allowed/matched devices to 1000 + - LP: #2141607 Desktop: revert change that caused user daemons + declaring the desktop plug to implicitly depend on graphical- + session.target + - Interfaces: Added pidfd_open and memfd_secret to seccomp template + - Interfaces: camera | add locking permission for /dev/video + + -- Ernest Lotter Thu, 12 Feb 2026 21:27:23 +0200 + snapd (2.74) xenial; urgency=medium * New upstream release, LP: #2138629