# changelog

author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1:1.0.2k-26.1
changelog:
  - Add openssl-1.0.2k-update-expiring-certificates.patch to fix build time tests
  - Added gcc to BuildRequires


author: Gael Duperrey <gduperrey@vates.fr> - 1.249.32-1.1
changelog:
  - Sync with hotfix XS82ECU1040
  - Remove and rebase XCP-ng patches to adapt them
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.249.32-1
  - - CA-378837 log results from Host.get_vms_which_prevent_evacuation
  - - xapi: switch CPU feature sets to the abstract type and don't interpret them
  - - Remove CPUID tests from xapi and add to xenopsd
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-2
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-1
  - - CA-377824 fix FD leak in xapi
  - * Mon May 22 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.30-1
  - - CA-333441, CA-377454 create /var/lock/sm/iscsiadm
  - * Mon May 15 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.29-1
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 1/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 2/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 3/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 4/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 5/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 6/6
  - - CP-41796 enable HTTPS migration by default
  - - CP-41796 prevent changes to https_only in CC_PREPARATIONS=true
  - - CA-376297: Test that mirage-crypto accepts all valid RSA keys
  - - CA-376448: explicitly validate refs in PVS_cache_storage.create
  - - CA-333441 - restarting ISCSI daemon after setting initiator IQN
  - - CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set
  - - CP-42835: Allow changing DNS servers when HA or clustering enabled
  - - maintenance: fix formatting
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.28-2
  - - Bump release and rebuild


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.249.32-1.2
changelog:
  - Add xapi-1.249.32-allow-a-user-to-select-on-which-SR-to-run-quicktest.backport.patch
  - Add xapi-1.249.32-add-vdi_update-filter-to-some-tests.backport.patch
  - Remove xapi-1.249.32-fix-quicktest-default-sr-param.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.32-2.1
changelog:
  - Security update, synced from hotfix XS82ECU1049
  - *** Upstream changelog ***
  - * Tue Sep 26 2023 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 1.249.32-2
  - - CP-45072 Use debugfs instead of libfsimage on xe-restore-metadata probes


author: Gael Duperrey <gduperrey@vates.tech> - 1.249.36-1.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Wed Mar 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.36-1
  - - CA-389496: Avoid configuration conflicts for rotating xapi logs
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.35-1
  - - CA-368437 remove duplicate keys from SM.features
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.34-2
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.34-1
  - - CP-45703 jemalloc: avoid bottlenecks with C threads
  - - CP-43755 Pam: avoid sleep(1) call when multithreaded
  - - CP-43755 Split internal and external auth locks
  - - CP-43755 Locking_helpers: introduce Semaphore
  - - CP-43755 xapi_session: switch to using Semaphore instead of Mutex
  - - CP-43755 Increase threads for PAM logins
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-6
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-5
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-4
  - - Bump release and rebuild
  - * Mon Oct 23 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.33-3
  - - remove xe-restore-metadata.use.debugfs.patch after merging it
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-1
  - - Leave the API version for Yangtze/hotfixes as 2.15
  - - CA-376879: VLAN PIF created in pool.join is shown as disconnected
  - - CA-374989: Avoid using get_record on cross-pool migration
  - - CP-42182 call "rrd-cli save_rrds" in bugtool - backport
  - - CA-383491: [Security fix] Use debugfs on xe-restore-metadata probes
  - - ci: update apt repositories on every run


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-2
changelog:
  - Fix inverted test for the presence of an old replacement chrony-wait service file
  - The file was not removed when it should.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-3
changelog:
  - Add a comment about chronyd and chrony-wait services. In 8.2.1 we still need to enable them manually.
  - Fix symlink to chrony-wait.service now that we removed our custom replacement from /etc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-4
changelog:
  - Add inline patches to fix cipher lists in sshd and ssh config for people updating from an updated 8.2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-6
changelog:
  - Partially sync with hotfix XS82ECU1018 (xenserver-release-8.2.1-10)
  - Fix spurious fcoe-related error messages
  - Install ssh_config and sshd_config configuration files into /opt/xensource/config/
  - But don't overwrite user configuration like the hotfix does. Keep using patches for now.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-8
changelog:
  - Update HTML page
  - HTTPS by default for XOA quick deploy
  - Webpage clean-up: remove FA fonts, references to unused fonts, jquery...
  - BuildRequires git for %autosetup -S git


