# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.32.1
changelog:
  - Update to 4.19.19-8.0.32
  - *** Upstream changelog ***
  - * Wed Oct 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.32
  - - CA-384066: fix netback vifs queue length
  - - Declare setup and dependencies for building live patches
  - * Fri Sep 29 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.31
  - - CA-383077 / XSI-1502: Backport SUNRPC-Always-drop-the-XPRT_LOCK-on-XPRT_CLOSE_WAIT
  - - CA-383484: Backport fix for XSA-441
  - * Thu Sep 07 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.30
  - - CA-381221: Make NFS timeouts more consistent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.33.1
changelog:
  - Sync with 4.19.19-8.0.33
  - *** Upstream changelog ***
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-8.0.33
  - - CA-387401: Fix for XSA-448


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.34.1
changelog:
  - Sync with 4.19.19-8.0.34
  - *** Upstream changelog ***
  - * Thu Feb 29 2024 Chunjie Zhu <chunjie.zhu@cloud.com> - 4.19.19-8.0.34
  - - CA-387199: Fix for XSI-1566


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.36.1
changelog:
  - Sync with 4.19.19-8.0.36
  - *** Upstream changelog ***
  - * Mon Jul 15 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.36
  - - New tag due to a wrong build for 4.19.19-8.0.35
  - * Wed Jul 10 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.35
  - - CA-394994  backport fix agaw for a supported 48 bit guest address width
  - - Make sure the kernel configuration is up to date
  - - CP-40289: kernel-devel: Add a BPF Type Format (BTF) info file for libbpf
  - - CP-48280: Disable Intel Powerclamp driver


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.38.1
changelog:
  - Sync with 4.19.19-8.0.38
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.38
    - CA-401809: DLM failure leaves system unstable fixes
    - CP-49678: Reduce Xen timer tick


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 25.6.0-1.1
changelog:
  - Update to upstream 25.6.0-1
  - Regenerate and rename patches with git format-patch
  - Rename xapi-24.11.0-update-xapi-conf.XCP-ng.patch to 0001-xcp-ng-configure-xapi.conf-to-meet-our-needs.patch
  - Rename xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch to 0002-xcp-ng-renamed-xs-clipboardd-to-xcp-clipboardd.patch
  - Rename xen-api-24.39.1-test-disable-cancellable-sleep.patch to 0003-xcp-ng-disable-cancellable-sleep.patch
  - Rename xen-api-24.39.1-debug-traces-for-is_component_enabled.patch to 0004-xcp-ng-add-debug-info-in-observer.patch
  - Rename xapi-24.19.2-fix-ipv6-import.XCP-ng.patch to 0005-xcp-ng-fix-IPv6-import.patch
  - Rename xapi-24.39.0-open-openflow-port.XCP-ng.patch to 0006-xcp-ng-open-close-openflow-port.patch
  - Rename xapi-24.39.0-update-db-tunnel-protocol-from-other_config.XCP-ng.patch to
    0007-xcp-ng-update-db-tunnel-protocol-from-other-config.patch
  - Add 0008-CA-408126-rrd-Do-not-lose-ds_min-max-when-adding-to-.patch
  - Add 0009-CA-408126-follow-up-Fix-negative-ds_min-and-RRD-valu.patch
  - Add 0010-CA-408841-rrd-don-t-update-rrds-when-ds_update-is-ca.patch
  - Rename 0003-Check-that-there-are-no-changes-during-SR.scan.patch to
    0011-Check-that-there-are-no-changes-during-SR.scan.patch
  - Drop xen-api-24.39.1-0001-CA-399669-Do-not-exit-with-error-when-IPMI-readings-.patch, merged upstream
  - Drop xen-api-24.39.1-0002-rrdp-dcmi-remove-extraneous-I-argument-from-cli-call.patch, merged upstream
  - Drop xen-api-24.39.1-0003-CA-399669-Detect-a-reason-for-IPMI-readings-being-un.patch, merged upstream
  - Drop 0001-CA-399757-Add-CAS-style-check-for-SR-scan.patch, merged upstream
  - Drop 0002-Improve-the-scan-comparison-logic.patch, merged upstream
  - *** Upstream changelog ***
    * Mon Feb 10 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.6.0-1
    - CP-52114: Add pool.license_server for pool level licensing
    - CP-52116: Support pool level licensing data in Host.apply_edition
    - CP-51209: add hooks lock_acquired/released for bpftrace
    - Hugo docs update
    - CA-405628: unmount/detach PVS cache VDI before destroying
    - xenopsd tests: split suite into 3 executables
    - CP-53335, topology: do not raise exception when loading invalid distance matrices
    - test_topology: reorganise test cases
    - Fix CI: Re-enable running shellcheck even when only docs changed
    - CP-49141: Mark the DB lock as high priority: try to avoid voluntary Thread.yield while we hold it
    - CP-49140: prepare for database optimizations
    - Document Xapi's auto-generated modules
    - CA-405754: Update xapi-storage-script state.db
    - Add Pool_role.is_master benchmarks
    - Optimize fastpath in Pool_role
    - CA-405971: avoid calling DB functions when in emergency mode
    * Mon Feb 03 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.5.0-1
    - CP-49158: [prep] Add Task completion latency benchmark
    - CP-51690: [prep] Xapi_periodic_scheduler: Factor out Delay.wait call
    - CP-51690: [bugfix] Xapi_periodic_scheduler: avoid 10s sleep on empty queue
    - CP-51693: feat(use-xmlrpc): [perf] use JSONRPC instead of XMLRPC for internal communication
    - CP-51701: [perf] Xapi_event: do not convert to lowercase if already lowercase
    - CP-51701: [perf] Xapi_event: drop duplicate lowercase_ascii
    - CP-51701: [perf] Xapi_events: replace List.any+map with List.exists
    - CP-49064:`Tgroup` library
    - CP-51493: Add `set_cgroup`
    - CP-51488: Set `tgroup` based on request header.
    - CP-49064: Init cgroups at xapi startup
    - CP-50537: Always reset `_extra_headers` when making a connection.
    - CP-50537: Propagate originator as a http request header
    - CP-51489: Classify threads based on http requests.
    - CP-50537: Add a guard in `xapi_globs`, `Xapi_globs.tgroups_enabled`.
    - CP-51692: feat(use-event-next): introduce use-event-next configuration flag
    - CP-52625: workaround Rpc.Int32 parsing bug
    - CP-51692: feat(use-event-next): cli_util: use Event.from instead of Event.next
    - CP-51692: feat(use-event-next): xe event-wait: use Event.from instead of Event.next
    - CA-401651: stunnel_cache: run the cache expiry code periodically
    - CA-401652: stunnel_cache: set stunnel size limit based on host role
    - CA-388210: rename vm' to vm
    - CA-388210: drop unused domain parameter
    - CA-388210: factor out computing the domain parameter
    - CA-388210: SMAPIv3 concurrency safety: send the (unique) datapath argument as domain for Dom0
    - CA-388210: SMAPIv3 debugging: log PID
    - CP-52707: Improve Event.from/next API documentation
    - CA-388210: SMAPIv3 concurrency: turn on concurrent operations by default
    - CA-388210: delete comment about deadlock bug, they are fixed
    - CA-388564: move qemu-dm to vm.slice
    - CP-52821: Xapi_periodic_scheduler: introduce add_to_queue_span
    - CP-52821: Xapi_event: use Clock.Timer instead of gettimeofday
    - CP-52821: xapi_periodic_scheduler: use Mtime.span instead of Mtime.t
    - CP-49158: [prep] batching: add a helper for recursive, batched calls like Event.{from,next}
    - CP-49158: [prep] Event.from: replace recursion with Batching.with_recursive
    - CP-51692: Event.next: use same batching as Event.from
    - CP-49158: [prep] Event.{from,next}: make delays configurable and prepare for task specific delays
    - CP-49158: Event.next is deprecated: increase delays
    - CP-49158: Use exponential backoff for delay between recursive calls
    - CP-49158: Throttle: add Thread.yield
    - CP-49141: add OCaml timeslice setter
    - CP-52709: add timeslice configuration to all services
    - CP-52709: add simple measurement code
    - CP-52709: recommended measurement
    - CP-52709: Enable timeslice setting during unit tests by default
    - CP-52320: Improve xapi thread classification
    - CP-52320 & CP-52795: Add unit tests for tgroup library
    - CP-52320 & CP-52743: Classify xapi threads.
    - CP-51692: Do not enable Event.next ratelimiting if Event.next is still used internally
    - CA-399669: Do not exit with error when IPMI readings aren't available
    - rrdp-dcmi: remove extraneous -I argument from cli calls
    - CA-399669: Detect a reason for IPMI readings being unavailable
    - xcp-rrdd: Make parsing of cmd's output more robust
    - CA-405593: Normalise API-installed host certificates
    - Refactor xapi-storage-script to use modules
    * Wed Jan 29 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.4.0-1
    - docs: Update doc/README.md and Hugo Relearn (to 5.23.0 for now)
    - CA-403759: Initialise licensing after no-other-masters check
    - CA-400272: pool.set_igmp_snooping_enabled: ignore non-managed PIFs
    - Revert "CP-45016: Clean up the source VM earlier"
    - CA-405502: Change post_detach to post_deactivate
    * Mon Jan 27 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.3.0-1
    - CA-403634: Corrected error text (this error can be issued for other types of devices, not only disks).
    - Removed errors that are not issued by the API.
    - fe_test: add test for syslog feature
    - CA-404591 - rrd: Do not lose precision when converting floats to strings
    - MVD CP-52334 multi-version driver API/CLI
    - Refactor feature processing logic in `Smint`
    - Move `transform_storage_exn` to Storage_utils
    - CP-45016: Add support for specifying nbd export in sparse_dd
    - CP-45016: Implement inbound SXM SMAPIv3 SRs
    - CP-45016: Delay VDI.compose in SXM
    - CA-404693 prohibit selecting driver variant if h/w not present
    - CP-45016: Implement a new nbd proxy handler
    - CP-45016: Clean up the source VM earlier
    - Update XE_SR_ERRORCODES.xml from SM
    - CA-404611: SXM: check power-state just before metadata export
    - CA-404611: live import: only check CPUID if VM is not Halted
    - CA-399260: Keep both new and old certs during the switchover
    - Added preprocessor directive so that the assembly internals are visible to XenServerTest only when specified.
    - Remove dangling use of python-future from rrdd.py
    - opam: add missing dependencies
    - CA-405404: Fix path to dracut
    * Fri Jan 17 2025 Gang Ji <gang.ji@cloud.com> - 25.2.0-1
    - CA-364194: use timespans for script timeouts
    - Remove unused Unixext.Direct module
    - github: update release for ubuntu 24.04
    - github: remove dependency of python wheel's on dune
    - CA-404640 XSI-1781 accept in PEM key/cert in any order
    - CA-404640 XSI-1781 bring back fail-06.pem
    - Log proper names for POSIX signals
    - Debug: add pretty-printing function for signals
    - CA-404597: rrd/lib_test - Verify that RRD handles non-rate data sources correctly
    - CA-404597: rrd - Pass Gauge and Absolute data source values as-is
    * Mon Jan 13 2025 Gang Ji <gang.ji@cloud.com> - 25.1.0-1
    - CA-403620: Drop the usage of fuser in stunnel client proxy
    - CA-403620: Make the stunnel proxy local port configurable
    - Removed deprecated methods.
    - Cmdlet refactoring:
    - CP-53003: Use JsonRpc v1.0 by default and switch to v2.0 once the API version is known.
    - Use Mtime.Span.to_float_ns instead of  Mtime.Span.to_uint64_ns+Int64.to_float
    - CA-404013: do not relock the mutex when backing up rrds
    - database: do not log when a field is dropped when loading from db_xml
    - CA-403700 use iso9660 file system for updates
    - rrd2csv: Accept a trailing comma in metrics names
    - CA-404512: Add feature flag to the new clustering interface
    * Thu Jan 09 2025 Gang Ji <gang.ji@cloud.com> - 25.0.0-1
    - Simplify event generation predicate in Xapi_event
    - Update comment to include implicit invariant
    - IH-747 - xapi/import: Don't lie in VDI import logs
    - IH-747 - database: Add an internal get_by_uuid_opt method
    - IH-747 - xapi/import: Use get_by_uuid_opt to not log backtraces when failure is expected
    - Simplify Eventgen
    - Add eventgen.mli
    - Hide that get_records are stored in a Hashtbl
    - Document eventgen.mli
    - Precompute symmetric closure table
    - CA-402921: Relax VIF constraint for PVS proxy
    - CA-402921: Update PVS-proxy tests
    - CA-402921: Restrict VIF.create
    - CA-402921: Add some unit tests for Xapi_vif_helpers
    - CA-403422: lengthen the timeout for xenopsd's serialized tasks
    - xenopsd: remove unused subtask parameter
    - XSI-1773 improve logging if service file unexpectedly exists
    - XSI-1773 clean up swtpm service files
    - CA-404020: Do not fail when removing a non-existing datasource
    - rrd/lib: remove outdated functions from utils
    - rrdd: add more comments about its datastructures
    - CA-404062: Wrongly restart xapi when receiving HTTP errors
    - CA-404062: Reformat
    - CP-51895: Drop FCoE support when fcoe_driver does not exists
    - Report memory available as Kib
    - xenopsd: Avoid calling to_string every time
    - gencert: name the pem parsers
    - CA-404236, gencert: when parsing pems, ignore data between key and certificates
    - CP-51895: Drop FCoE support when fcoe_driver does not exists
    - CA-403344: Add `db_get_by_uuid_opt` to db_cache*
    - Add unit test to the new `db_get_by_uuid_opt` function
    - Style: Refactor using failwith_fmt
    - CA-404013: replace Thread.delay with Delay module
    * Wed Dec 18 2024 Gang Ji <gang.ji@cloud.com> - 24.40.0-1
    - CP-51694: Add testing of C# date converter
    - CP-51694: Add testing of Java date deserializer
    - rrdd: avoid constructing intermediate lists, use Seq
    - CA-391651 - rrd: Remove deprecated member of rra struct
    - CA-391651: Make timestamps of data collectors in xcp-rrdd independent
    - CA-391651: rrdd_server - read plugins' timestamps, don't just ignore them
    - CA-391651: Propagate the timestamp inside RRD.
    - CA-391651: Rename 'new_domid' parameter to 'new_rrd'
    - CA-391651 - rrd: Carry indices with datasources
    - CA-391651: Use per-datasource last_updated timestamp during updating and archiving
    - CA-391651: rrd - don't iterate over lists needlessly
    - CA-391651: rrdd_monitor - Handle missing datasources by resetting them explicitly
    - CA-391651 - rrd protocol: Stop truncating timestamps to seconds
    - CA-391651 - rrdd.py: Stop truncating timestamps to seconds
    - CA-391651 rrd: Don't truncate timestamps when calculating values
    - CA-391651: Update RRD tests to the new interfaces
    - CA-391651 - docs: Update RRD design pages
    - Increase wait-init-complete timeout
    - CP-51694: Add testing of Go date deserialization
    - Set non-UTC timezone for date time unit test runners
    - Fix parsing of timezone agnostic date strings in Java deserializer
    - Ensure C# date tests work when running under any timezone
    - Minimize xenstore accesses during domid-to-uuid lookups
    - CP-52524 - dbsync_slave: stop calculating boot time ourselves
    - CP-52524: Generate an alert when various host kernel taints are set
    - xenopsd: Optimize lazy evaluation
    - NUMA docs: Fix typos and extend the intro for the best-effort mode
    - CP-51772: Remove traceparent from Http.Request
    - CP-51772: Remove external usage of traceparent
    - CP-51772: Add TraceContext to Tracing
    - CP-51772: Add Http Request Propagator
    - CP-51772: Extract traceparent back out
    - CP-51772: Remove tracing dependency from http-lib
    - CP-51772: Consolidate propagation into tracing lib
    - CP-51772: Repair xapi-cli-server's tracing
    - CP-51772: Repair tracing in xapi
    - Restructuring
    - CP-51772: Forward baggage from xe-cli
    - CP-51772: Propagate trace context through spans
    - Apply fix by psafont: [Xenopsd] chooses NUMA nodes purely based on amount of free memory on the NUMA nodes of the host
    - Apply fix by psafont: "Future XAPI versions may change `default_policy` to mean `best_effort`."
    - xe-cli completion: Use grep -E instead of egrep
    - CA-388210: factor out computing the domain parameter
    - CA-388210: SMAPIv3 concurrency safety: send the (unique) datapath argument as domain for Dom0
    - CA-388210: SMAPIv3 debugging: log PID
    - CA-388210: SMAPIv3 concurrency: turn on concurrent operations by default
    - Improve Delay test
    - CP-42675: add new SM GC message ID
    - CA-403101: Keep host.last_update_hash for host joined a pool
    - xapi_message: Fix incorrect slow path invocation (and its logs)
    - xapi: move the 'periodic' scheduler to xapi-stdext-threads
    - Check index before using it removing an element from Imperative priority queue
    - Fix removing elements from Imperative priority queue
    - Remove possible systematic leak in Imperative priority queue
    - Add test for is_empty for Imperative priority queue
    - Move and improve old test for Imperative priority queue
    - Initialise Imperative priority queue array on creation
    - CA-399757: Add CAS style check for SR scan
    - xapi-stdext-threads: use mtime.clock.os
    - Remove unused ocaml/perftest
    - Remove references to perftest
    - Update quality-gate
    - CA-401075: remove misleading logs from HTTP client
    - CP-52807: No more cluster stack alert
    - Rewrite Delay module
    - CA-394851: Update allowed operations on the cloned VBD
    - CP-51429 Avoid redundant processing when full metadata already exists during sync_updates
    - Delay: wait a bit more testing the module
    - Simple test for periodic scheduler
    - Limit mutex contention in add_to_queue
    - Compare correctly Mtime.t
    - Protect queue with mutex in remove_from_queue
    - Remove signal parameter from add_to_queue
    - Fix multiple issues in periodic scheduler
    - Add test for removing periodic event in periodic scheduler
    - Add test for handling event if queue was empty in periodic scheduler
    - xapi_sr: remove commented code from 2009
    - Add a test to check the loop is woken up adding a new event
    - CA-390025: do not override SR's client-set metadata on update
    - xe-cli completion: Hide COMPREPLY manipulation behind functions
    - Improve the scan comparison logic
    - CA-402901: Update leaked dp to Sr
    - Added manually messages that are not autogenerated.
    - Docs tidy up:
    - Add VM_metrics to metadata export
    - Add VM_metrics to metadata import
    - Cross-pool live migration: move CPU check to the target host
    - CA-380580: cross-pool migration: no CPU checks for halted VMs
    - CA-403633: Keep vPCI devices in the same order
    - CA-403767: verifyPeer can't use root CA for appliance cert check
    * Tue Nov 26 2024 Gang Ji <gang.ji@cloud.com> - 24.39.0-2
    - Bump release and rebuild


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.2
changelog:
  - Remove dependency on rrd-client-lib. It's not used by XCP-ng.
  - Update xenstore keys that Xapi Guest Agent checks for Windows PV driver versions


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 25.6.0-1.7
changelog:
  - Fix another deadlock in xenopsd
  - Prevent xapi concurrent calls during migration from indirectly make each other fail


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.8
changelog:
  - Fix several RRD issues and make the plugins more robust:
    - Cap Derive values within a certain range without making them NaN
    - Use a computed delay time for RRD loop to prevent gaps in metrics collection
    - Avoid duplicating datasources on plugin restore
    - Protect against a resource leak in the plugins
    - Avoid running out of mmap-ed pages in xcp-rrdd-cpu for large numbers of domains
    - Prevent exceptions from escaping and introducing gaps into metrics collection
    - Avoid missing metrics from new and destroyed domains


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 25.6.0-1.10
changelog:
  - Cherry-pick 83a48882655d "xenopsd: set xen-platform-pci-bar-uc key in xenstore",
    commit is upsteam in 25.26.0.


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.3-1
changelog:
  - Add LVM plugin to list and create PVs, VGs and LVs
  - RAID plugin: handle gracefully when no RAID is present


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.11.0-1
changelog:
  - Update smartctl plugin to report status about megaraid devices.
  - Add a new ipmitool plugin to get information from ipmitool.
    - It returns information about sensors
    - It also returns ipmi lan information


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-6.1
changelog:
  - Sync with 4.17.5-6
  - *** Upstream changelog ***
    * Tue Dec  3 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-6
    - Fix migration of VMs from CH 8.2 CU1 to XS8 when the guest is using BHI_DIS_S
    * Mon Nov 25 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-5
    - Initial AMD Turin support
    - Fix dom0 pIRQ limit calculation
    - Fix emulation of BMI1/2 instructions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-9.1
changelog:
  - Sync with 4.17.5-9
  - *** Upstream changelog ***
    * Fri Feb 07 2025 Javi Merino <javi.merino@cloud.com> - 4.17.5-9
    - Fix PCI config reads patch
    * Tue Feb  4 2025 Javi Merino <javi.merino@cloud.com> - 4.17.5-8
    - Fix IO_PAGE_FAULT reported by AMD
    - Reduce PCI config reads
    * Wed Dec 18 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-7
    - Fix IO-APIC initialization with ExtINT mode pins
    - Fix emulation of MOVBE instruction
    - Fix Ocaml rpath setting


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-10.1
changelog:
  - Sync with 4.17.5-10
  - Remove xsa467.patch now provided by XS package
  - *** Upstream changelog ***
    * Thu Feb 27 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-10
    - Fix for XSA-467 CVE-2025-1713
    - Fix reboot/shutdown issues on AMD due to local APIC ESR interrupts


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-13.1
changelog:
  - Sync with 4.17.5-13
  - Remove xen-4.17.5-x86-intel-Fix-PERF_GLOBAL-fixup-when-virtualised.patch included in XS
  - *** Upstream changelog ***
    * Thu May  8 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-13
    - Fix for XSA-469 CVE-2024-28956
    * Mon Apr 28 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-12
    - Work around Ice Lake erratum ICX143, which manifests as a hang on boot
    - Fix crash on boot when perf counters are unavailable
    * Wed Mar 26 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-11
    - Add xenguest support for the platform:mmio_hole_size attribute
    - Identify which domain watchdog fired


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-14.1
changelog:
  - Sync with 4.17.5-14
  - Remove xsa470-4.17.patch included in XS release
  - *** Upstream changelog ***
    * Fri Jun 13 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-14
    - Fix for XSA-470 CVE-2025-27465
    - Fix booting on servers with RAM above the 16T boundary
    - Fix possible watchdog timeout caused by unnecessary cache flushing


author: Teddy Astie <teddy.astie@vates.tech> - 4.17.5-15.1
changelog:
  - Sync with 4.17.5-15
  - *** Upstream changelog ***
    * Fri Jul  4 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-15
    - Fix for XSA-471 CVE-2024-36350 CVE-2024-36357
    - Perform provenance checks on AMD microcode blobs


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 4.17.5-15.2
changelog:
  - Backport 22650d605462 "x86/hvmloader: select xen platform pci MMIO BAR UC or WB MTRR
    cache attributes"
  - Backport fd06f8700769 "tools/golang: update auto-generated libxl based types"


