# changelog

author: Stephen Cheng <stephen.cheng@cloud.com> - Version: 5.10.214-3
changelog:
  - CP-48894: Modify checksum
  - The checksum was wrongly grenerated in the previous commit due to xenpkg upgrade


author: Thierry Escande <thierry.escande@vates.tech> - 5.10.214-3.1
changelog:
  - Obsoletes igc-module RPM
  - Import XCP-ng specific patches from obsolete igc-module RPM
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.13.1
changelog:
  - Bugfix update based on XS82E034
  - *** Upstream changelog ***
  - * Mon Sep 20 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.13
  - - CA-358056: CVE-2021-3444: bpf: Fix truncation handling for mod32 dst reg wrt zero
  - - CA-358059: CVE-2021-3600: bpf: Fix 32 bit src register truncation on div/mod
  - - CA-357418: Fix race in set_evtchn_to_irq
  - - CA-356822: CVE-2021-33909: size_t-to-int vulnerability in Linux's filesystem layer
  - - CA-354789: Backport upstream patch to fix warning in evtchn_interrupt()


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.14.1
changelog:
  - Security update based on XS82E036 (XSA-392)
  - Remove new Citrix Commercial COPYING file that doesn't concern us (we don't ship their logo)
  - *** Upstream changelog ***
  - * Thu Dec 09 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.14
  - - CP-37340: Clarify licensing and conform to Fedora packaging guidelines
  - - CA-361715: Limit netback rx queue length (XSA-392)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.15.1
changelog:
  - Security update based on XS82ECU1024
  - *** Upstream changelog ***
  - * Wed Dec 07 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.15
  - - CA-366138: Backport a patch to fix a CIFS oops
  - - CA-366517: Fix Linux's ability to use 64bit linear framebuffers
  - - CA-364458 / XSA-396: PV frontends vulnerable to attack by backends
  - - CA-368126 / XSA-403: Linux disk/nic frontends data leaks
  - - CA-369758 / XSA-423: Guest triggerable NIC reset/abort/crash via netback
  - - CA-373544 / XSA-424: Guests can trigger deadlock in netback


author: Gael Duperrey <gduperrey@vates.fr> - 4.19.19-7.0.16.1
changelog:
  - Synced with hotfix XS82ECU1028
  - *** Upstream changelog ***
  - * Wed Mar 22 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.16
  - - CP-42482: Convert to koji
  - - CA-375558: Fix nbd ref counting bug
  - - CA-375244: Ensure DLM reconnects after network outage
  - - CA-371727: Fix evaluation of _PDC ACPI method on dom0
  - - CA-376418: Backport fixes to XSA-423


author: Gael Duperrey <gduperrey@vates.fr> - 4.19.19-7.0.17.1
changelog:
  - Synced with hotfix XS82ECU1042
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.17
  - - CA-379289: Add a fix for XSA-432


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.18.1
changelog:
  - Sync with hotfix XS82ECU1052
  - No functional changes: we already had applied the fix for XSA-441 previously


author: Gael Duperrey <gduperrey@vates.tech> - 4.19.19-7.0.19.1
changelog:
  - Synced with hotfix XS82ECU1055
  - *** Upstream changelog ***
  - * Fri Oct 20 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.19
  - - CA-381221: Make NFS timeouts more consistent
  - - CA-383077 / XSI-1502: Backport SUNRPC-Always-drop-the-XPRT_LOCK-on-XPRT_CLOSE_WAIT


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.23.1
changelog:
  - Security fix, synced with hotfix XS82ECU1059
  - *** Upstream changelog ***
  - * Mon Jan 15 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.23
  - - Rebuild on release environment
  - * Mon Jan 15 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.22
  - - CA-387589: Refresh patch for XSA-441 so it works in livepatch environments
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.21
  - - CA-384066: fix netback vifs queue length
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.20
  - - CA-387401: Fix for XSA-448


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.19.0-3
changelog:
  - Security fix: avoid race conditions that can cause the dbengine to grow out of control
  - Set memory mode = ram, no more disk cache
  - See https://github.com/netdata/netdata/issues/8001
  - Enforce installation of our netdata.conf.ui even if there are local changes


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.3.1 + 0.10.3-2.1
changelog:
  - Update to 7.4p1-23.3 + 0.10.3-2
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.15-4.1
changelog:
  - Synced from XS82ECU1072
  - *** Upstream changelog ***
  - * Thu Jul 4 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-4
  - - Drop python plugin as not required
  - * Wed Mar 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.9.15-3
  - - CA-389574: Depend on vi


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-4
changelog:
  - Add inline patches to fix cipher lists in sshd and ssh config for people updating from an updated 8.2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-6
changelog:
  - Partially sync with hotfix XS82ECU1018 (xenserver-release-8.2.1-10)
  - Fix spurious fcoe-related error messages
  - Install ssh_config and sshd_config configuration files into /opt/xensource/config/
  - But don't overwrite user configuration like the hotfix does. Keep using patches for now.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-8
changelog:
  - Update HTML page
  - HTTPS by default for XOA quick deploy
  - Webpage clean-up: remove FA fonts, references to unused fonts, jquery...
  - BuildRequires git for %autosetup -S git


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-13
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


author: Thierry Escande <thierry.escande@vates.tech> - 8.2.1-14
changelog:
  - Sync with hotfix XS82ECU1072
  - *** Upstream changelog ***
  - * Wed Sep 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 8.2.1-11+
  - - CA-392433: Start dhclient on iSCSI BFS interfaces+


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.12-1
changelog:
  - CA-378768: capture block schedulers
  - Capture the contents of the cron dirs
  - CP-41107: Store bug tool log in status report
  - CP-43806: Collect `xen-cpuid -p`
  - Collect customised multipath configuration
  - Remove obsolete MPP from bugtool
  - CP-42688: Collect NRPE config files
  - XSI-1385: Collect plain text (human-readable) SAR file reports


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 1.3.13-1
changelog:
  - CP-45506: Also add testcase for the subarchive at etc/systemd.tar
  - CP-45506: Archive /etc/systemd as a tar archive inside the output


author: Lin Liu <Lin.Liu01@cloud.com> - 1.3.17-1
changelog:
  - Backport re-adding PowerBroker Identity Service/PBIS
  - CP-41238: Run commands before collecting directories
  - Fix to preserve the directory traversal order in Python2
  - CP-49944: plugins: Fix multiple file patterns for the same directory


