* Mon Mar 17 2025 dimstar@opensuse.org
- Add 8588.patch: Fix compile when using Pango >= 1.56.2.
* Tue Mar 11 2025 dimstar@opensuse.org
- Add explicit pkgconfig(pango) BuildRequires: used to be pulled in
by python-gobject, but that's no longer the case with 3.52.
- Add 8583.patch: Fix build againts pygobject 3.52.
* Fri Feb 14 2025 dimstar@opensuse.org
- Update to version 2.0.6:
+ This release adds the following features:
- Add 'fwupdtool efiboot-hive' to allow setting the nmbl cmdline
- Allow setting the inhibit reason from fwupdmgr
- Allow USB-provided hidraw devices to use DS-20 descriptors
+ This release fixes the following bugs:
- Correctly deploy the dbx on MSI hardware
- Correctly extract the milestone from Lenovo version numbers
- Do not add invalid CoSWID entities to fix a fuzzing hang
- Fix Logitech HID++ child device detection
- Get the correct internal network VID and PID from Redfish
- Include the payload length in the Wacom scaler update start command
- Only use emulated devices when using device-emulate
- Reload the thunderbolt retimer version after the payload is deployed
- Speed up startup by ~1% by limiting the precision of percentage updates
- Support new version formats for future Huddly devices
- Updating the Logitech Rallybar in a more reliable way
+ This release adds support for the following hardware:
- HPE Gen10/Gen10+ devices using Redfish
* Mon Feb 03 2025 dimstar@opensuse.org
- Update to version 2.0.5:
+ This release adds the following features:
- Allow emulating devices reading EFI keys
- Allow skipping device tests by CPU architecture
+ This release fixes the following bugs:
- Cleanup Dell kestrel devices when disconnected
- Correctly build binary EFI_SIGNATURE_LIST objects
- Do not allow dbx updates when no ESP was found
- Ignore BootXXXX entries that do not exist when checking the dbx
- Ignore EFI binaries that are zero-sized, or not well formed
- Inhibit dbx updates if snapd is not available when using Ubuntu-style FDE
- Only match the device checksum if the protocol matches
- Raise authentication requirements for emulation-load
- Request to upload failed reports for install/downgrade too
- Use the kernel architecture when building the dbx instance ID
- Write sbatlevel to PE/COFF files correctly
+ This release adds support for the following hardware:
- More ELAN Fingerprint readers
- Star Labs StarLite Magnetic Keyboard
* Mon Jan 20 2025 dimstar@opensuse.org
- Update to version 2.0.4+4:
+ dell-kestrel: cleanup the devices when disconnected
+ Raise authentication requirements for emulation-load
+ uefi-dbx: Only list the version in the quirk file key
- Update to version 2.0.4:
+ This release adds the following features:
- Record the entire USB descriptor in the emulation data
- Return defined return code when network metadata refresh
fails
+ This release fixes the following bugs:
- Add a new private flag of 'delayed-removal' to remove a
footgun
- Added a more specific instance ID for qc-s5gen2 USB devices
- Add fadvise64 to the systemd syscall allowlist
- Add the Unifying bootloader VID/PID as a full instance ID
- Allow disabling zero-length packet for modem-manager devices
- Allow recovering Logitech Bolt receiver in bootloader mode
- Correctly parse CSV streams without trailing NULs
- Detect if network is reachable before downloading metadata
- Disabling reading the OptionROM device after dumping
- Do not claim kernel interface to avoid Parade downstream port
resets
- Do not save BootOrder when measuring system integrity
- Enumerate child nordic-hid devices correctly
- Fix a possible critical warning for Mediatek scaler devices
- Fix Firehose padding for some modem-manager devices
- Fix UEFI capsule updates when using 4096 byte NVME blocksize
- Get the Dell dock update package version correctly
- Never read more of the composite stream from a partial stream
- Notify snapd about DBX updates
- Probe sd_mod before starting
- Properly handle FU_DEVICE_PRIVATE_FLAG_NO_GENERIC_GUIDS
- Remove the test for CSME 18 manufacturing lock
- Restore the Logitech compatibility UFY instance IDs
- Show the correct version when installing a same-device
composite update
- Show updates with problems when using 'fwupdmgr get-releases'
- Split up the AMD GPU VBIOS P/N for the version
- Use attr USB4_TYPE rather than guessing from
thunderbolt_domain
- Use the ISO date as a dbx version number for the Microsoft
KEK
- Use the KEK to set the dbx vendor ID
* Thu Jan 09 2025 dimstar@opensuse.org
- Update to version 2.0.3:
+ This release adds the following features:
- Add a power quirk for Framework systems
- Speed up writing firmware to the new Dell dock
+ This release fixes the following bugs:
- Deinitialize DRM after getting GPU marketing name to fix Xorg
startup
- Do not show 'Device has been removed' as a dock device error
- Fix a warning about legion-hid2 progress going backwards
- Fix some small memory leaks in realtek-mst and dell-kestrel
- Only mark supported Logitech devices as updatable
- Parse FDTs with missing END tokens to work on more
ChromeBooks
- Reduce the device emulation RSS requirement by ~40%
- Skip checking BootXXXX entries when the partition does not
exist
+ This release adds support for the following hardware:
- Primax Ryder Mouse
- Changes from version 2.0.2:
+ Add fwupdtool 'get-version-formats' and 'vercmp' commands
+ Add support for checking AMD HW configuration MSR
+ Add support for enumerate-only device emulation to increase
test coverage
+ Add support for passing a JSON file for emulation instead of
ZIP
+ Remove support for now-obsolete CSR DFU and Nitrokey devices
- Changes from version 2.0.1:
+ Add API so that gnome-firmware can record devices for emulation
+ Save the emulation-tag devices to the database rather than the
config file
- Changes from version 2.0.0:
+ Drop legacy signing formats for verification of metadata and
firmware
+ Reduce the runtime memory usage and CPU startup cost
significantly
+ Remove all the long-deprecated legacy CLI tools
+ Remove libgusb and GUdev from plugins and use libusb and sysfs
instead
+ Stream firmware binaries over a file descriptor rather than
into memory
- Drop harden_fwupd-offline-update.service.patch: offline service
no longer exists.
- Drop harden_fwupd-refresh.service.patch: merged upstream.
- Drop fwupd-jscSLE-11766-close-efidir-leap-gap.patch: fwupd now
falls back to ID_LIKE.
- Bump shlib_sover to 3, following upstream.
- Add python3-dbusmock BuildRequires: new dependency.
* Thu Jan 09 2025 glin@suse.com
- Update fwupd-bsc1130056-change-shim-path.patch to correct the
path for shim.efi
* Mon Dec 23 2024 gmbr3@opensuse.org
- Correct efi_fw_update arch list:
* Remove ppc64le and s390x - these aren't supported
* Add armv6hl/armv7hl and riscv64 - support recently added
* Sat Dec 21 2024 tobi.goergens@gmail.com
- Update to version 1.9.27:
+ This release fixes the following bugs:
- Add a power quirk for Framework systems
- Allow cros-ec repair the device after flush failure
- Check the VLI USB3 firmware size before erasing
- Disallow DBX updates on the Samsung Galaxy Book2 360
- Do not show 'Device has been removed' as a dock error
- Do not use a CMSE11 function when using CSME18
- Fix an unlikely memory leak when using ModemManger Sahara devices
- Fix a tiny memory leak in algoltek-usb when checking status
- Mark UEFI dbx updates as affecting full disk encryption
- Parse FDTs with missing END tokens
- Rename the dell-k2 plugin to dell-kestrel and rework the update flow
+ This release adds support for the following hardware:
- Google GID8 Headset
- Parade PS188
- Primax Ryder Mouse
- Update to version 1.9.26:
+ This release fixes the following bugs:
- Add HSI tests for Arrow and Meteor Lake CSME
- Allow UEFI capsule config values to be set with fwupdmgr modify-config
- Check for the logitech-bulkcontroller response packet length correctly
- Fix using ID_LIKE for fallback when ESP isn't mounted
- Fix various Coverity-reported overflowed constants
- Only compare the first 10 characters of the AMD GPU part number
+ This release adds support for the following hardware:
- Jabra PanaCast
- Some Lenovo Legion HID devices
* Tue Oct 15 2024 dimstar@opensuse.org
- Drop rcFOO symlinks (PED-266).
Version: 2.0.20-160000.1.1
* Thu Feb 26 2026 dimstar@opensuse.org
- Update to version 2.0.20:
+ This release adds the following features:
- Add support for changing AMD UMA carveout size
- Warn the user if they are using the blocked-firmware
functionality
+ This release fixes the following bugs:
- Disable the UEFI plugins on 32bit x86
- Do not hang when parsing an invalid USB descriptor
- Do not return an error if the fastboot property is not
provided
- Fix a CCGX DMC regression when installing on the HP G5 dock
- Fix a harmless heap OOB read in AMD kria SOM EEPROM parser
- Fix a potential fastboot string over-read
- Fix a regression causing MBIM QDU updates to fail
- Honor polkit auth for emulation tag modify device
- Speed up calculating the cab checksum by ~21%
- Verify the uncompressed size when decompressing CAB files
+ This release adds support for the following hardware:
- HP Engage One G2 Advanced Hub
- PixArt PJP274 (Framework Laptop)
- Several new Jabra GNP devices
* Tue Jan 13 2026 dimstar@opensuse.org
- Add 0001-Allow-systemd-service-to-access-block-sr-cdrom-devic.patch:
allow fwupd.service to interact with cdrom (boo#1256507)
* Sat Jan 03 2026 holden@opensuse.org
- Actually build and install manpages:
* These were originally removed because including them would
have required pulling a nasty set of ghc/pandocs build
dependencies directly into Ring 1
* fwupd upstream quickly reverted this change in 1.8.13, but
the conditional to block building/installing the manpages by
default was never removed from the specfile
* This restores the fwupd manpages, which have been sorely
missing in openSUSE for a couple years
* Fri Dec 19 2025 dimstar@opensuse.org
- Update to version 2.0.19:
+ This release adds the following features:
- Add two commands to fwupdtool to calculate and find CRCs
- Allow systems to use the udev event source without using systemd
+ This release fixes the following bugs:
- Always show the correct new firmware version in 'fwupdmgr get-history'
- Fix an integer underflow when parsing a malicious PE file
- Fix a regression when enumerating the dell-dock status component
- Fix the fuzzer timeout when parsing a synaptics-rmi SBL container
- Fix updating the Intel GPU FWDATA section
- Respect 'fwupdmgr --force' when installing firmware
+ This release adds support for the following hardware:
- Lenovo Sapphire Folio Keyboard
* Mon Dec 01 2025 dimstar@opensuse.org
- Update to version 2.0.18:
+ This release adds the following features:
- Add a MOTD message for devices needing reboot after staged updates
- Create the reboot-required file when a firmware update requires reboot
- Record the system state for each composite emulation
- Update USI docking station firmware without requiring a manual replug
+ This release fixes the following bugs:
- Add a MTD device problem if the Intel SPI BIOS lock is set
- Allow changing the child name when using PARENT_NAME_PREFIX
- Allow UpdateCapsule to work on systems that do not support SecureBoot
- Correctly parse the EFI_CAPSULE_RESULT_VARIABLE_HEADER
- Fall back to the SMBIOS version for BIOS MTD devices
- Fix a crash when trying to record an i2c emulation
- Fixed Huddly upgrade problems with major version changes
- Fix man page compatibility with apropos and whatis
- Fix parsing USB BOS descriptors
- Fix up the x86_64-specific capsule flags when deploying UEFI firmware
- Improve firmware stream searching speed by a huge amount
- Only convert the release uint32_t to device version format for UEFI devices
- Only handle SIGINT in fwupdtool when required
- Refactor the hypervisor and container detection to be usable from plugins
- Set PlatformArchitecture as the CPU architecture for RISC-V machines
- Use a sensible timeout when doing qc-s5gen2 HID requests
+ This release adds support for the following hardware:
- HP Portable USB-C 4K HDMI Hub
- Lenovo Legion Go 2 (as a HID device)
- Synaptics HapticsPad
- Rebase fwupd-bsc1130056-change-shim-path.patch
* Tue Nov 11 2025 mgorse@suse.com
- Do not try to load i2c_dev kernel module on s390x. S390x has no
native i2c devices and does not have the module (bsc#1253138).
* Wed Nov 05 2025 dimstar@opensuse.org
- Update to version 2.0.17:
+ This release adds the following features:
- Add support for client-side phased update deployment
- Add support for post-quantum signatures
- Allow clearing the cache dirirectory
- Allow fwupdtpmevlog to dump the raw eventlog data
- Build a NVMe GUID derived from the serial number
- Make fwupdtool extract work with deeply nested images
- Parse VSS and FTW variable stores from EFI volumes
- Reintroduce the FreeBSD CI target
- Support very old versions of UDisks
+ This release fixes the following bugs:
- Add 'fwupdmgr hwids' by exposing another daemon property
- Add offline hashes for the Microsoft 20250902 dbx
- Add the Framework-specific KEK and db hashes
- Allow updating IFD BIOS region via parent MTD
- Avoid showing reinstall prompts for composite devices
- Clean up the fwupdtool lock file in all cases
- Correctly match the correct historical composite component
- Do not allow PK or KEK updates when system has a test key installed
- Do not allow reinstalling when using ONLY_VERSION_UPGRADE
- Do not require AC power to run the installed tests
- Do not scan EFI volumes when constructing MTD BIOS devices
- Ensure REGION is always set for MTD IFD children
- Ensure SCSI instance IDs are valid ASCII values
- Fix a critical warning when parsing invalid Jabra firmware
- Fix an Ilitek parsing crash found when fuzzing
- Fix an inotify race when refreshing metadata
- Fix a pending-activation problem with Dell docking stations
- Fix a potential hang when creating a chunk array with aligned sizes
- Fix MTD emulation recording for PCI-backed devices
- Fix the device order when the parent specifies install-parent-first
- Fix the FLMSTR layout when reading IFD partitions
- Fix the thunderbolt controller rushing to finalize before onlining retimers
- Fix writing Intel GPU OptionROM data and OptionROM code
- Flush stale events to make the Logitech Rallybar more reliable
- Ignore all the Intel GPU MTD devices
- Ignore errors when writing the last page of Dell dock firmware
- Make an error message more specific
- Modify the Dell dock needs-activation flag after updates are installed
- Only add one devlink device for each PCI card
- Parse the FMAP SBOM area as uSWID when required
- Relax the USI dock DMC child device checks for new firmware
- Revert back to the flashrom deprecated API as the new API is unusable
- Rewrite the fwupdmgr manpage to be more useful
- Use higher delay when update status for Logitech peripheral devices
+ This release adds support for the following hardware:
- ASUS CX9406 (touch controller)
- Framework Copilot keyboard
- Genesys GL352530 and GL352360
- Huddly C1
- Lexar and Maxio NVMe SSDs
- Primax Ryder mouse 2
- Add pkgconfig(libmnl) BuildRequires: new dependency.
* Thu Oct 02 2025 schwab@suse.de
- Fix file list
* Fri Sep 12 2025 dimstar@opensuse.org
- Update to version 2.0.16:
+ This release adds the following features:
- Add a 'search' feature to fwupdtool and fwupdmgr
+ This release fixes the following bugs:
- Fix missing release locations when loading from artifact
- Fix remaining issues to make updates on FreeBSD work
* Wed Sep 10 2025 dimstar@opensuse.org
- Update to version 2.0.15:
+ This release adds the following features:
- Allow child devices to use the parent name as a prefix
+ This release fixes the following bugs:
- Add newer commands and options for Fish completion
- Allow installing archives named as .CAB rather than .cab
- Erase Firehose modem devices correctly
- Fix Goodix enumeration issues
- Fix sending firmware reports without --force
- Fix the FreeBSD build
- Fix version number of BnR MTD devices
- Require additional requirements for the default PS5512 devboard
- Require a full system shutdown for all Micron NVMe updates
- Use a better name for Elan touchpad and Intel PCH SPI devices
+ This release adds support for the following hardware:
- Foxconn SDX61 Modem
- Jabra Evolve2 child devices
- NVIDIA ConnectX-6, ConnectX-7 and ConnectX-8 NICs