# changelog

author: David Morel <david.morel@vates.tech> - 2.1-26.xs28.1
changelog:
  - Update to IPU 2024.1 release
  - Security updates for:
      - INTEL-SA-INTEL-SA-00972
      - INTEL-SA-INTEL-SA-00982
      - INTEL-SA-INTEL-SA-00898
      - INTEL-SA-INTEL-SA-00960
      - INTEL-SA-INTEL-SA-01045


author: Gael Duperrey <gduperrey@vates.tech> - 2.1-26.xs29.1
changelog:
  - Update to IPU 2024.2 release
  - Security updates for:
      - INTEL-SA-INTEL-SA-01051
      - INTEL-SA-INTEL-SA-01052
      - INTEL-SA-INTEL-SA-01036


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.1-26.xs29.2
changelog:
  - Update Gemini Lake 06-7a-01 to revision 0x42
  - Fixes a regression introduced in IPU-2024.1, revision 0x40


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.1-26.xs29.3
changelog:
  - Update to IPU 2024.3 release
  - Security updates for:
      - INTEL-SA-01083
      - INTEL-SA-01118
      - INTEL-SA-01100
      - INTEL-SA-01038
      - INTEL-SA-01046
  - Removed 06-7a-01 individual "Source" file, now included in the latest release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.1-26.xs29.4
changelog:
  - Update to the fixed released of IPU 2024.3
  - Intel has re-done the release after we reported that 06-a5-03 was not updated


author: David Morel <david.morel@vates.tech> - 2.1-26.xs29.5
changelog:
  - Update to the latest version of IPU 2024.3
  - Security updates for: 
      - INTEL-SA-01103
      - INTEL-SA-01097


author: Gael Duperrey <gduperrey@vates.tech> - 2.1-26.xs29.6
changelog:
  - Update to microcode-20241112 release
  - Security updates for:
      - INTEL-SA-01101
      - INTEL-SA-01079
  - Updated security updates for:
      - INTEL-SA-01097
      - INTEL-SA-01103
  - Updates for multiple functional issues


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.5-9.37.1
changelog:
  - Security update
  - Sync with hotfix XS82ECU1047, which fixes XSAs we already fixed, but also goes further on XSA-443 and adds other fixes
  - *** Upstream changelog ***
  - * Wed Oct 4 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.37
  - - Fixes for
  -   - XSA-438 CVE-2023-34322
  -   - XSA-439 CVE-2023-20588
  -   - XSA-440 CVE-2023-34323
  -   - XSA-442 CVE-2023-34326
  -   - XSA-443 CVE-2023-34325
  -   - XSA-444 CVE-2023-34327 CVE-2023-34328
  - - Pygrub extended to deprivilege itself before operating on guest disks.
  - - Ignore MADT entries with invalid APIC_IDs.
  - - Fix the emulation of VPBLENDMW with a mask and memory operand.
  - - Fix a incorrect diagnostic about spurious interrupts.
  - - Update IO-APIC IRTEs atomically.  Fixes a race condition which causes
  -   interrupts to be routed badly, often with "No irq handler for vector"
  -   errors.
  - - Further fix for XSA-433.  Extend the chicken-bit workaround to all CPUs
  -   which appear to be a Zen2 microarchtiecture, even those not on the published
  -   model list.
  - - Fix for AMD errata #1474.  Disable C6 after 1000 days of uptime on AMD Zen2
  -   systems to avoid a crash at ~1044 days.
  - - Fix for MSR_ARCH_CAPS boot-time calculations for PV guests.


author: Gael Duperrey <gduperrey@vates.tech> - 4.13.5-9.38.1
changelog:
  - Security update, synced from hotfix XS82ECU1057
  - *** Upstream changelog ***
  - * Mon Nov 6 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.38
  - - Fixes for
  -   - XSA-445 CVE-2023-46835
  -   - XSA-446 CVE-2023-46836
  - - Fix for AMD erratum #1485, which has been observed to cause #UD exception on AMD Zen4 systems.


author: David Morel <david.morel@vates.tech> - 4.13.5-9.39.1
changelog:
  - Security update, synced from hotfix XS82ECU1061
  - Replace our fix for XSA-449
  - *** Upstream changelog ***
  - * Fri Mar  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.39
  - - Fixes for:
  -   - XSA-449 CVE-2023-46839
  -   - XSA-453 CVE-2024-2193, off by default
  -   - XSA-452 CVE-2023-28746


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.1
changelog:
  - Security update, synced from hotfix XS82ECU1062
  - *** Upstream changelog ***
  - * Mon Apr  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.40
  - - Fixes for:
  -   - XSA-454 CVE-2023-46842
  -   - XSA-455 CVE-2024-31142
  -   - XSA-456 CVE-2024-2201


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.2
changelog:
  - Security update
  - Fix for:
    - XSA-458 CVE-2024-31143: fixing double unlock in x86 guest IRQ handling


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.3
changelog:
  - Security update
  - Fix for:
    - XSA-460 CVE-2024-31145 - error handling in x86 IOMMU identity mapping
    - XSA-461 CVE-2024-31146 - PCI device pass-through with shared resources


author: David Morel <david.morel@vates.tech> - 4.13.5-9.44.1
changelog:
  - Synced from hotfix XS82ECU1077
  - Replace our backports for XSA-458 and XSA-460
  - *** Upstream changelog ***
  - * Thu Sep 19 2024 Alex Brett <alex.brett@cloud.com> - 4.13.5-9.44
  - - Fix a packaging issue affecting livepatching
  - * Thu Sep 12 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.13.5-9.43
  - - Fix for XSA-462 / CVE-2024-45817.
  - * Thu Sep 05 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.13.5-9.42
  - - Fix for XSA-460 / CVE-2024-31145.
  - * Thu Jul 11 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.13.5-9.41
  - - Fixes for XSA-458 CVE-2024-31143.
  - - Fix early detection of CPU features on hardware with the CPUID Limit active
  -   in firmware.
  - - Fix RTC emulation.


author: David Morel <david.morel@vates.tech> - 4.13.5-9.45.1
changelog:
  - Synced from hotfix XS82ECU1078
  - *** Upstream changelog ***
  - * Tue Nov 05 2024 Javi Merino <javi.merino@cloud.com> - 4.13.5-9.45
  - - Fixes for XSA-463 CVE-2024-45818
  - - Fixes for XSA-464 CVE-2024-45819
  - - Fix IO-APIC directed EOIs when using AMD-Vi interrupt remapping
  - - Remove an overly strict check when parsing AMD IVRS ACPI tables


