# changelog

author: Gael Duperrey <gduperrey@vates.tech> - 5.9_0.5.5.0-1.1
changelog:
  - Update to version 5.9_0.5.5.0-1.1
  - Synced from XS driver SRPM mellanox-mlnxen-5.9_0.5.5.0-1.xs8~2_1.src.rpm
  - *** Upstream changelog ***
  - * Mon Aug 28 2023 Stephen Cheng <stephen.cheng@citrix.com> - 5.9_0.5.5.0-1
  - - CP-43274: Update to version 5.9-0.5.5.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.28-1.1
changelog:
  - Rebase on hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.249.28-1
  - - CA-372128: Avoid extra comparisons in db_cache_types
  - - CA-342527: Remove unnecessary list traversals on rbac.check
  - - CA-352073: Ensure all serialized calls can pass rbac checks
  - - CA-370578 use subsystemId in NVidia GPU matching
  - - Change license to match the one in the source repo
  - - Fix xen BuildReqs
  - - Remove macro for dependency generator
  - * Thu Oct 13 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.27-1
  - - CA-368579: Patches upstreamed


author: Gael Duperrey <gduperrey@vates.fr> - 1.249.32-1.1
changelog:
  - Sync with hotfix XS82ECU1040
  - Remove and rebase XCP-ng patches to adapt them
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.249.32-1
  - - CA-378837 log results from Host.get_vms_which_prevent_evacuation
  - - xapi: switch CPU feature sets to the abstract type and don't interpret them
  - - Remove CPUID tests from xapi and add to xenopsd
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-2
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-1
  - - CA-377824 fix FD leak in xapi
  - * Mon May 22 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.30-1
  - - CA-333441, CA-377454 create /var/lock/sm/iscsiadm
  - * Mon May 15 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.29-1
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 1/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 2/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 3/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 4/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 5/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 6/6
  - - CP-41796 enable HTTPS migration by default
  - - CP-41796 prevent changes to https_only in CC_PREPARATIONS=true
  - - CA-376297: Test that mirage-crypto accepts all valid RSA keys
  - - CA-376448: explicitly validate refs in PVS_cache_storage.create
  - - CA-333441 - restarting ISCSI daemon after setting initiator IQN
  - - CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set
  - - CP-42835: Allow changing DNS servers when HA or clustering enabled
  - - maintenance: fix formatting
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.28-2
  - - Bump release and rebuild


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.249.32-1.2
changelog:
  - Add xapi-1.249.32-allow-a-user-to-select-on-which-SR-to-run-quicktest.backport.patch
  - Add xapi-1.249.32-add-vdi_update-filter-to-some-tests.backport.patch
  - Remove xapi-1.249.32-fix-quicktest-default-sr-param.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.32-2.1
changelog:
  - Security update, synced from hotfix XS82ECU1049
  - *** Upstream changelog ***
  - * Tue Sep 26 2023 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 1.249.32-2
  - - CP-45072 Use debugfs instead of libfsimage on xe-restore-metadata probes


author: Gael Duperrey <gduperrey@vates.tech> - 1.249.36-1.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Wed Mar 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.36-1
  - - CA-389496: Avoid configuration conflicts for rotating xapi logs
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.35-1
  - - CA-368437 remove duplicate keys from SM.features
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.34-2
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.34-1
  - - CP-45703 jemalloc: avoid bottlenecks with C threads
  - - CP-43755 Pam: avoid sleep(1) call when multithreaded
  - - CP-43755 Split internal and external auth locks
  - - CP-43755 Locking_helpers: introduce Semaphore
  - - CP-43755 xapi_session: switch to using Semaphore instead of Mutex
  - - CP-43755 Increase threads for PAM logins
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-6
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-5
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-4
  - - Bump release and rebuild
  - * Mon Oct 23 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.33-3
  - - remove xe-restore-metadata.use.debugfs.patch after merging it
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-1
  - - Leave the API version for Yangtze/hotfixes as 2.15
  - - CA-376879: VLAN PIF created in pool.join is shown as disconnected
  - - CA-374989: Avoid using get_record on cross-pool migration
  - - CP-42182 call "rrd-cli save_rrds" in bugtool - backport
  - - CA-383491: [Security fix] Use debugfs on xe-restore-metadata probes
  - - ci: update apt repositories on every run


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.35.1
changelog:
  - Synced from hotfix XS82ECU1044
  - *** Upstream changelog ***
  - * Tue Aug 1 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.35
  - - Fix bug in XSA-433 fix, which accidentally disabled a hardware errata workaround.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.36.1
changelog:
  - Security update, synced from hotfix XS82ECU1045
  - *** Upstream changelog ***
  - * Thu Aug 3 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.36
  - - Fixes for
  -   - XSA-434 CVE-2023-20569
  -   - XSA-435 CVE-2022-40982
  - - Expose MSR_ARCH_CAPS to guests on all Intel hardware by default.  On Cascade
  -   Lake and later hardware, guests now see the bits stating hardware immunity
  -   to various speculative vulnerabilities.


author: Andrei Semenov <andrei.semenov@vates.tech> - 4.13.5-9.36.2
changelog:
  - More fixes to Zenbleed (XenServer backport from Xen Project)
  - Fix for AMD errata #1474 (XenServer backport from Xen Project)
  - Fix for XSA-429 (XenServer backport from Xen Project)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.5-9.37.1
changelog:
  - Security update
  - Sync with hotfix XS82ECU1047, which fixes XSAs we already fixed, but also goes further on XSA-443 and adds other fixes
  - *** Upstream changelog ***
  - * Wed Oct 4 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.37
  - - Fixes for
  -   - XSA-438 CVE-2023-34322
  -   - XSA-439 CVE-2023-20588
  -   - XSA-440 CVE-2023-34323
  -   - XSA-442 CVE-2023-34326
  -   - XSA-443 CVE-2023-34325
  -   - XSA-444 CVE-2023-34327 CVE-2023-34328
  - - Pygrub extended to deprivilege itself before operating on guest disks.
  - - Ignore MADT entries with invalid APIC_IDs.
  - - Fix the emulation of VPBLENDMW with a mask and memory operand.
  - - Fix a incorrect diagnostic about spurious interrupts.
  - - Update IO-APIC IRTEs atomically.  Fixes a race condition which causes
  -   interrupts to be routed badly, often with "No irq handler for vector"
  -   errors.
  - - Further fix for XSA-433.  Extend the chicken-bit workaround to all CPUs
  -   which appear to be a Zen2 microarchtiecture, even those not on the published
  -   model list.
  - - Fix for AMD errata #1474.  Disable C6 after 1000 days of uptime on AMD Zen2
  -   systems to avoid a crash at ~1044 days.
  - - Fix for MSR_ARCH_CAPS boot-time calculations for PV guests.


author: Gael Duperrey <gduperrey@vates.tech> - 4.13.5-9.38.1
changelog:
  - Security update, synced from hotfix XS82ECU1057
  - *** Upstream changelog ***
  - * Mon Nov 6 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.38
  - - Fixes for
  -   - XSA-445 CVE-2023-46835
  -   - XSA-446 CVE-2023-46836
  - - Fix for AMD erratum #1485, which has been observed to cause #UD exception on AMD Zen4 systems.


author: David Morel <david.morel@vates.tech> - 4.13.5-9.39.1
changelog:
  - Security update, synced from hotfix XS82ECU1061
  - Replace our fix for XSA-449
  - *** Upstream changelog ***
  - * Fri Mar  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.39
  - - Fixes for:
  -   - XSA-449 CVE-2023-46839
  -   - XSA-453 CVE-2024-2193, off by default
  -   - XSA-452 CVE-2023-28746


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.1
changelog:
  - Security update, synced from hotfix XS82ECU1062
  - *** Upstream changelog ***
  - * Mon Apr  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.40
  - - Fixes for:
  -   - XSA-454 CVE-2023-46842
  -   - XSA-455 CVE-2024-31142
  -   - XSA-456 CVE-2024-2201


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.2
changelog:
  - Security update
  - Fix for:
    - XSA-458 CVE-2024-31143: fixing double unlock in x86 guest IRQ handling


author: Aaron Robson <aaron.robson@citrix.com> - 10.1.9-1
changelog:
  - CA-304344: Makefile warning due to missing file XSFeatureInstallLicence.py
  - CA-304345: Integrate xsconsole with Travis CI
  - 'make clean' and 'make test' implemented
  - include suitable .gitgnore


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.11-1.1
changelog:
  - Rebase on CH 8.2
  - Re-remove incloudsphere subpackage
  - Keep xsconsole-10.1.9-rebrand-xsconsole-service.XCP-ng.patch
  - Keep xsconsole-10.1.9-define-xcp-ng-colors.XCP-ng.patch
  - Keep xsconsole-10.1.10-replace-ext3-with-ext.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.13-1.1
changelog:
  - Sync with CH 8.2.1
  - Remove patches contributed and merged upstream
  - *** Upstream changelog ***
  - * Fri Jul 09 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.13-1
  - - Display 'Ext' instead of 'Ext3' for `ext` SRs
  - - CA-355872: Use XAPI to edit DNS entries within xsconsole
  - - Display clearer error message when XAPI unreachable
  - - rework is_master to raise in case of failure
  - * Fri Feb 19 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.12-1
  - - CA-348699: Fix full version display if the build number is empty


