New bugfix release 2.60.4

New in snapd 2.60.4:

• Switch to plug/slot in the "qualcomm-ipc-router" interface
  but keeping backward compatibility
• Fix "custom-device" udev KERNEL values
• Allow firmware-updater snap to install user-daemons
• Allow loopback as a block device

New bugfix release 2.60.3

• Fix bug in the "private" plug attribute of the shared-memory
  interface that can result in a crash when upgrading from an
  old version of snapd.
• Fix missing integration of the /etc/apparmor.d/tunables/home.d/
  apparmor to support non-standard home directories

New bugfix release 2.60.2

• Performance improvements for apparmor_parser to compensate for the slower -O expr-simplify default used. This should bring the performance back to the 2.60 level and even increase it for many use-cases (when using the snap with the vendored apparmor_parser).
• Bugfixes

New bugfix release 2.60.1

• Bugfixes
• Use "aes-cbc-essiv:sha256" in cryptsetup on arm 32bit devices
  to increase speed on devices with CAAM support
• Stop using -O no-expr-simplify in apparmor_parser to avoid
  potential exponential memory use. This can lead to slower
  policy complication in some cases but it is much safer on
  low memory devices.

New release 2.60

New in snapd 2.60:

• Support for dynamic snapshot data exclusions
• Apparmor userspace is vendored inside the snapd snap
• Added a default-configure hook that exposes gadget default configuration
  options to snaps during first install before services are started
• Allow install from initrd to speed up the initial installation for
  systems that do not have a install-device hook
• New snap sign --chain flag that appends the account and account-key
  assertions
• Support validation-sets in the model assertion
• Support new "min-size" field in gadget.yaml
• New interface: "userns"
• Moved to go-1.18 for building which results in up to 20% smaller binaries

New security fix release 2.59.5

New in snapd 2.59.5:

• Explicitly disallow the use of ioctl + TIOCLINUX
  This fixes CVE-2023-1523.

Please note that this issue only affects user on Linux consoles, not on virtual terminals like gnome-terminal or xterm.

New bugfix release 2.59.4

New in snapd 2.59.4:

• Retry when looking for disk label on non-UEFI systems
• Fix remodel from UC20 to UC22

New in snapd 2.59.3:

• Fix quiet boot
• Ignore case for vfat paritions when validating
• Restart always enabled units

New in snapd 2.59.2:

• Notify users when a user triggered auto refresh finished

New release 2.59.1

New in snapd 2.59.1:

• Add udev rules from steam-devices to steam-support interface
• Bugfixes for layout path checking, dm_crypt permissions,
  mount-control interface parameter checking, kernel commandline
  parsing, docker-support, refresh-app-awareness

For completeness the changes for 2.59 are also included. This
version had a bug in the refresh code so it was never released
beyond the beta version.

New in snapd 2.59:

• Support setting extra kernel command line parameters via snap
  configuration and under a gadget allow-list
• Support for Full-Disk-Encryption using ICE
• Support for arbitrary home dir locations via snap configuration
• New nvidia-drivers-support interface
• Support for udisks2 snap
• Pre-download of snaps ready for refresh and automatic refresh of the
  snap when all apps are closed
• New microovn interface
• Support uboot with CONFIG_SYS_REDUNDAND_ENV=n
• Make "snap-preseed --reset" re-exec when needed
• Update the fwupd interface to support fully confined fwupd
• The memory,cpu,thread quota options are no longer experimental
• Support debugging snap client requests via the SNAPD_CLIENT_DEBUG_HTTP
  environment variable
• Support ssh listen-address via snap configuration
• Support for quotas on single services
• prepare-image now takes into account snapd versions going into the image,
  including in the kernel initrd, to fetch supported assertion formats

New bugfix release 2.58.3

New bugfix release:

• interfaces/screen-inhibit-control: Add support for xfce-power- manager
• interfaces/network-manager: do not show ptrace read denials
• interfaces: relax rules for mount-control what for functionfs
• cmd/snap-bootstrap: add support for snapd_system_disk
• interfaces/modem-manager: add net_admin capability
• interfaces/network-manager: add permission for OpenVPN
• httputil: fix checking x509 certification error on go 1.20
• i/b/fwupd: allow reading host os-release
• boot: on classic+modes MarkBootSuccessfull does not need a base
• boot: do not include base= in modeenv for classic+modes installs
• tests: add spread test that validates revert on boot for core does not happen on classic+modes
• snapstate: only take boot participants into account in UpdateBootRevisions
• snapstate: refactor UpdateBootRevisions() to make it easier to check for boot.SnapTypeParticipatesInBoot()

New bugfix release 2.58.2

New upstream release:

• bootloader: fix dirty build by hardcoding copyright year