# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20240717-1
changelog:
  - Update to IPU 2024.3 release
  - As the archive from XS is missing an update for 06-a5-03 due to Intel
    initially forgetting to release its update, we manually package this file.


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.142-3
changelog:
  - Security update
  - Fix XSAs 361 362 365
  - Fix use-after-free in xen-netback caused by XSA-332
  - See https://xenbits.xen.org/xsa/
  - Updated to patch-4.19.93-94-mod to resolve XSA 365 conflict


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.154-1
changelog:
  - Security (XSAs 367 and 371) and bugfix update
  - XSA-367: Linux: netback fails to honor grant mapping errors
  - XSA-371: Linux: blkback driver may leak persistent grants
  - Patches backported from linus kernel to fix event-related issues caused by XSA-332
  - Update patch level to 4.19.154


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.227-1
changelog:
  - Fixes issue #522
  - Cumulative update till 4.19.227
  - Disabled Citrix patches that were taken from upstream
  - Disabled GFS2 and gvt patches as its not support by the distro


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.227-4
changelog:
  - Don't provide kernel Provides
  - We don't want kernel-alt to be pulled as build deps instead of main kernel packages


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.316+1-1
changelog:
  - Import kernel source v4.19.316
  - Rebase and rework needed patches from main kernel repo
  - Sync spec file with main kernel repo v4.19.19-8.0.34.1
  - Fix Requires on python3-xcp-libs


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: David Morel <david.morel@vates.tech> - 4.12-2.3.1
changelog:
  - Sync with CentOS 8 Stream version 4.12-2.el8.3
  - Build with GCC 11
  - Include fix for CVE-2024-3652 from Alma 8


author: Damien Thenot <damien.thenot@vates.tech> 3.0.12-12.3
changelog:
  - Updated 0028-feat-LargeBlock-introduce-largeblocksr-51.patch
  - Add a clearer error message for multidevices config not being accepted


author: Benjamin Reis <benjamin.reis@vates.tech> - 3.2.0-1.1
changelog:
  - Rebase on 3.2.0-1
  - Drop 0001-XCP-ng-cherry-pick-of-CP-45750-get-storage-init-test.patch
  - Drop 0026-Implement-correctly-fake_import-in-test_on_slave.py.patch
  - Drop 0027-fix-NFSSR-ensure-we-can-attach-SR-during-attach_from.patch
  - *** Upstream changelog ***
  - * Fri May 17 2024 Mark Syms <mark.syms@cloud.com> - 3.2.0-1
  - - CA-387861 Introduce fair locking subsystem
  - - CA-384942: use resolved CD path for error checking
  - - CA-392823: ensure no device mapper conflicts in LVHDSR detach
  - * Wed Mar 27 2024 Mark Syms <mark.syms@citrix.com> - 3.1.0-1
  - - CP-45750: Allow for alternative local storage SR types
  - - Release 3.0.13
  - * Tue Mar 26 2024 Mark Syms <mark.syms@citrix.com> - 3.0.13-2
  - - CA-388353: Fix context in cgrules patch triggerin script
  - - CA-379287 Cope with fs-encoded XMLRPC request on command line
  - - CP-383791 Fix handling of UTF-8 in srmetadata.py
  - - CP-45514: set ownership and permissions on backend
  - - CA-371791: Fix world readable permissions on EXTSR
  - - CA-384030 Ignore awkardly named images in ISO SRs
  - - CP-45927: set multipath checker for Equalogic 100E-00 to tur
  - - CA-377454: ensure that the iscsiadm running lock exists
  - - CA-384783 Probe for NFS4 when rpcinfo does not include it
  - - CA-253490 Add missing error codes
  - - CP-46807: reduce logs from scheduler set errors
  - - fix(NFSSR): ensure we can attach SR during attach_from_config call
  - - CP-39600: Rework LVM locking to use fair lock queue
  - - fix(ISOSR): type accepts 'nfs_iso' not 'nfs' as the docs claim
  - - CA-386281 CIFS username can be omitted in ISO SR
  - - CP-46863 Dump Multipath Status from Storage Manager
  - - CA-386479: ensure we login to all iSCSI Target Portal Groups
  - - CP-39600: remove stray print call
  - - CA-385069: Remove unnecessary LvmContext wrap
  - - CA-387770 Improve error message for readonly shares
  - - CA-388451: ensure that xapi sessions are logged out
  - - Always remove the RO/RW tag from VDIs in case of failure
  - - CA-387770 increase NFSSR and SMBSR test coverage
  - - CA-386316 Fix race condition between sr_detach and GC
  - - CP-47841: update multipath configuration for PURE Storage
  - - CA-387770: check for read-only shared fs at create
  - - CP-48018: Update to systemd to manage services
  - - CA-388933: rework GC Active lock to ensure GC starts


author: Benjamin Reis <benjamin.reis@vates.tech> - 3.2.1-1.1
changelog:
  - Rebase on 3.2.1-1
  - *** Upstream changelog ***
  - * Wed May 29 2024 Mark Syms <mark.syms@cloud.com> - 3.2.1-1
  - - Use python3 rather than python3.6
  - - CA-390937: fix conflict between GC and SR detach
  - - CA-392989: improve diagnostics for tests


author: Benjamin Reis <benjamin.reis@vates.tech> - 3.2.3-1.1
changelog:
  - Rebase on 3.2.3-1
  - Add 0028-reflect-upstream-changes-in-our-tests.patch
  - *** Upstream changelog ***
  - * Thu Jul 04 2024 Mark Syms <mark.syms@cloud.com> - 3.2.3-1
  - - CA-393194: Fix pvremove failure
  - * Mon Jun 24 2024 Mark Syms <mark.syms@cloud.com> - 3.2.2-1
  - - CP-49689: remove reverse dependency on SR from xs_errors
  - - CP-49775 convert SMGC to systemd service
  - - CP-49720 Move LOCK_TYPE_RUNNING from cleanup.py to lock.py


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.2.3-1.3
changelog:
  - %preun: Move command above exit 0 so that it's executed
  - Properly disable the removed sr_health_check.timer
  - Also remove the dangling symlink if still present due to improper removal
    of the timer in sm-3.2.0-1.5


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-19
changelog:
  - Loosely sync with xenserver-release-8.4.0-3
  - *** Upstream changelog ***
  - * Mon Feb 26 2024 Gerald Elder-Vass <Gerald.Elder-Vass@cloud.com> - 8.4.0-3
  - - CP-47543: Increase pid max
  - * Tue Jan 30 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-2
  - - CP-44429: Move snmpd.xs.conf to net-snmp.spec
  - - CP-44429: iptable: Accept snmp port 161
  - * Tue Jan 09 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-1
  - - CP-44059: Update Product & Platform versions ahead of XenServer 8 GA
  - * Fri Jan 05 2024 Lin Liu <lin.liu@cloud.com> - 8.3.60-12
  - - In XS9, sshd manages the config itself, so remove config update from xenserver-release
  - * Wed Jan 03 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.3.60-11
  - - CP-37929: Remove legacy logrotate mechanism
  - - CA-385315: print both SHA1 and SHA256 fingerprints


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-23
changelog:
  - Loosely sync with xenserver-release-8.4.0-5
  - *** Upstream changelog ***
  - * Mon Apr 08 2024 Stephen Cheng <stephen.cheng@cloud.com> - 8.4.0-5
  - - CP-47599: Update set-printk-console to Python3
  - * Thu Mar 07 2024 Alex Brett <alex.brett@cloud.com> - 8.4.0-4
  - - CA-389583: Update curlrc cipher specification to openssl format


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-24
changelog:
  - Loosely sync with xenserver-release-8.4.0-10
  - *** Upstream changelog ***
  - * Wed May 22 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-10
  - - CA-392433: Start dhclient on iSCSI BFS interfaces
  - * Thu May 16 2024 Bernhard Kaindl <bernhard.kaindl@cloud.com> - 8.4.0-9
  - - CA-392412: Disable the bpf syscall for unprivileged tasks (not used)
  - * Sat May 11 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-8
  - - CP-46084: Revert and move gnu-free-sans-fonts obsoletion to xs-obsolete-packages
  - * Fri May 10 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-7
  - - CP-46084: Obsolete unused package gnu-free-sans-fonts
  - * Tue May 07 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-6
  - - CP-49083: Do not patch logrotate configuration


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-26
changelog:
  - Don't require the empty kernel-livepatch and xen-livepatch packages
  - Ensure rsyslog and systemd are installed in xcp-ng-release-config's %post


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-27
changelog:
  - Loosely sync with xenserver-release-8.4.0-11
  - *** Upstream changelog ***
  - * Tue Jun 18 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-11
  - - CP-47026: Move mcelog config changes to mcelog.spec


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-28
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


