# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.5-1.1
changelog:
  - Update to 3.54.5-1
  - *** Upstream changelog ***
  - * Tue Aug 01 2023 Mark Syms <mark.syms@citrix.com> - 3.54.5-1
  - - Report control timeouts correctly
  - * Wed Jun 21 2023 Mark Syms <mark.syms@citrix.com> - 3.54.4-1
  - - Remove unused and broken libvhdio
  - - CA-377624: Guard against NULL tiocb in lio event handler
  - * Wed Apr 12 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-2
  - - Rebuild
  - * Wed Mar 29 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-1
  - - Rebuild
  - * Mon Feb 27 2023 Mark Syms <mark.syms@citrix.com> - 3.54.2-1
  - - Rebuild
  - * Fri Feb 17 2023 Mark Syms <mark.syms@citrix.com> - 3.54.1-1
  - - Rebuild
  - * Thu Feb 16 2023 Mark Syms <mark.syms@citrix.com> - 3.54.0-1
  - - Release 3.54.0
  - - Update compiler set
  - - Various NBD server improvements


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-2.1
changelog:
  - Update to 3.54.6-2
  - *** Upstream changelog ***
  - * Thu Sep 28 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-2
  - - CP-40871: Enable rate limit control on unpause
  - * Thu Sep 07 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-1
  - - CP-40871: return the number of sectors coalesced from vhd-util
  - - CP-45025: Avoid retries except in a few specific cases
  - - CA-382087: Only write the bitmap if the contents have changed


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-3.1
changelog:
  - Sync with 3.54.6-3
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Mark Syms <mark.syms@citrix.com> - 3.54.6-3
  - - Rebuild against libxenstore.so.4


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.9-1.1
changelog:
  - Sync with 3.54.9-1
  - *** Upstream changelog ***
  - * Thu Apr 25 2024 Mark Syms <mark.syms@citrix.com> - 3.54.9-1
  - - Address various memory management issues
  - * Wed Mar 27 2024 Mark Syms <mark.syms@citrix.com> - 3.54.8-1
  - - CP-48048: Blktap fix code coverage (XS8 only)
  - - tap-ctl: Improve list output filtering
  - - CP-46763: When VBD queue is not ready call the driver completion
  - - CP-46778: always issue request via issue_requests
  - - CP-46771: separate queue checks for completed and new requests.
  - - CP-46764: mask ring event handlers before quiescing the queue
  - - CP-46764: When the VBD is quiesced skip checking for requests to submit
  - - Fix setting of CFLAGS for mockatests
  - - Do not free iconv cd if allocation fails
  - - Fix the order of linker options in CBT
  - - Fixup various bits of incorrect automake usage
  - - CA-384162: Send completions for all partial responses
  - - CA-390490: allocate vhd request before locking bat
  - - CP-48057: Add unit tests for drivers/scheduler.c


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.4-1.1
changelog:
  - Sync with 3.55.4-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Mark Syms <mark.syms@cloud.com> - 3.55.4-1
    - CA-392151 lcache.c uses wrong buffer size definition
    - CA-403297: when storing read-through do not mirror
    * Mon Nov 18 2024 Mark Syms <mark.syms@cloud.com> - 3.55.3-1
    - CP-52620: enable local caching after opening all other images
    * Tue Nov 05 2024 Tim Smith <tim.smith@cloud.com> - 3.55.2-1
    - CA-387575 Remove static libraries and libtool archives from devel package
    - Correct name of exposed NBD server
    - CA-401174 Filedescriptor leak in NBD option negotiation
    * Mon Sep 16 2024 Tim Smith <tim.smith@cloud.com> - 3.55.1-1
    - Redo the revert of an incorrect NBD FD leak fix
    * Fri Sep 13 2024 Tim Smith <tim.smith@cloud.com> - 3.55.0-1
    - CP-46765 - Fix asan issues in unit tests
    - CA-396659: rationalise bitops and fix overflow issues
    - CA-396659: delete legacy debt utility vhd-update
    - Handle scheduler uuid overflow explictly
    - CP-50952 Autodetect NBD server protocol version on client connect
    - Fix use of incorrect label in error case
    - CA-397082 Properly fix FD leak in NBD server
    - CP-50955 Add a new-style NBD server for each VDI
    * Tue Aug 06 2024 Mark Syms <mark.syms@cloud.com> - 3.54.10-1
    - CA-391882: fix nbd connection fd leak bug
    - Remove some unnecessary build dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.5-2.1
changelog:
  - Sync with 3.55.5-2
  - Drop patch "Add an option to never resolve parent path when vhd-util query is
  called" already included in upstream v3.55.5
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-2
    - CA-404370: enable NBD client only after completing handshake
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-1
    - Add an option to never resolve parent path when vhd-util query is called


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.55.5-2.3
changelog:
  - Fix a bad integer conversion that interrupts valid coalesce calls on large VDIs
  - Add 0002-CP-308382-fix-sign-conversion-in-coalesce.patch
  - Add 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-6.1
changelog:
  - Sync with 3.55.5-6
  - Revert openssl 3 dependency from XS specfile (no change compared to previous XCP-ng release)
  - Drop patch 0002-CP-308382-fix-sign-conversion-in-coalesce.patch, upstream now
  - Drop patch 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch, upstream now
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-6
    - Fix coalesced size conversion in vhd-util-coalesce (CP-308382)
    * Mon Jun 23 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-5
    - Backport fix for CA-408175
    - CP-308382: fix sign conversion in coalesce
    * Mon Apr 07 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-4
    - CP-54256: log when reporting EOPNOTSUPP
    * Fri Feb 21 2025 Deli Zhang <deli.zhang@cloud.com> - 3.55.5-3
    - CP-50273: Move CCM dependency to OpenSSL 3


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.3.1
changelog:
  - Don't build vfs_glusterfs and thus don't buildrequire glusterfs
  - Remove the useless build dependency to epel-release
  - Add gcc to the BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.4.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Yann Dirson <yann.dirson@vates.tech> - 4.10.16-25.1
changelog:
  - Revert XS changes to prepare for merging new upstream, keeping changelog
    and kerberos config changes
  - By Lucas Ravagnier <lucas.ravagnier@vates.tech>:
    - Import samba-4.10.16-25.el7_9
    - Use a bcond to enable XCP-ng packaging tweaks while preserving upstream spec content.
    - *** Upstream changelog ***
      * Tue Jul 25 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-25
      - resolves: #2222250 - Fix netlogon capabilities level 2

      * Fri Jan 20 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-24
      - related: #2154364 - Add additional patches for CVE-2022-38023

      * Wed Dec 21 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-23
      - resolves: #2154364 - Fix CVE-2022-38023

      * Tue Aug 30 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-20
      - resolves: #2119058 - Fix possible segfault in winbind

      * Tue May 10 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-19
      - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                 mapping for uid/gid conflict

      * Tue Jan 25 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-18
      - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
      - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
      - resolves: #2046148 - Fix CVE-2021-44142


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 4.10.16-25.2
changelog:
  - Apply packaging changes from XenServer's samba-4.10.16-17.0.{4-8}
  - *** Upstream changelog ***
  - * Tue Apr 01 2025 Lin Liu <Lin.Liu01@cloud.com> - 4.10.16-17.0.8
  - - CA-408843: enctypes support machine account
  -
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 4.10.16-17.0.7
  - - CP-50277: Remove unused cups package
  -
  - * Mon Sep 9 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.6
  - - CP-50735: Remove avahi support
  -
  - * Wed Aug 7 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.5
  - - CP-50670: Remove python and json support
  -
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.2
changelog:
  - CA-383046: Use the emulated RTC to implement time services
  - CA-383095: Add a patch to fix an unusual Windows PXE boot hang
  - CP-45175: Add debug messages to XenVariable
  - CP-45175: Disable the BGRT
  - CP-45175: Add extra debug statements
  - CP-45175: Tweak debug levels
  - Include g++ from devtoolset as a build requirement


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.4.1
changelog:
  - Sync with 20220801-1.7.4
  - *** Upstream changelog ***
  - * Fri Feb 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.4
  - - CA-388017: Fix most PixieFail vulnerabilities
  - - Fix CVE-2023-45229 - Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
  - - Fix CVE-2023-45230 - Buffer overflow in the DHCPv6 client via a long Server ID option
  - - Fix CVE-2023-45231 - Out of Bounds read when handling a ND Redirect message with truncated options
  - - Fix CVE-2023-45232 - Infinite loop when parsing unknown options in the Destination Options header
  - - Fix CVE-2023-45233 - Infinite loop when parsing a PadN option in the Destination Options header
  - - Fix CVE-2023-45234 - Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
  - - Fix CVE-2023-45235 - Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.5.1
changelog:
  - Sync with 20220801-1.7.5
  - *** Upstream changelog ***
  - * Wed Mar 20 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.5
  - - CA-390410: Disable some unneeded modules
  - - CA-390410: Downgrade some errors to warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.7.1
changelog:
  - Sync with 20220801-1.7.7
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.7
  - - CA-388489: Fix CVE-2023-45236, CVE-2023-45237, and additional fix for CVE-2023-45229
  - * Tue May 14 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.6
  - - CP-46076: Support xs9 build


author: anthony.perard@vates.tech - 20220801-1.7.10.1
changelog:
  - Sync with edk2-20220801-1.7.10
  - *** Upstream changelog ***
  - * Wed Jun 11 2025 Fei Su <fei.su@cloud.com> - 20220801-1.7.10
  - - CA-410587 [XSI-1806] Fix 802.1Q Header Handling in OVS on XS8
  - * Fri Mar 07 2025 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.9
  - - CP-53516: Add perl modules require for XS9 build
  - * Thu Oct 31 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.8
  - - CP-50542: Upgrade OpenSSL to 3.0.9
  - - CP-52657: Fix CVE-2024-6119


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.0-1.1
changelog:
  - Update to 2.0.0-1
  - *** Upstream changelog ***
  - * Thu Jan 19 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-1
  - Switch upstream to GitHub
  - - Build for Python 3 and drop Python 2 support
  - - CP-41654: Check for duplicate uuids and reflabels in templates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Update to 2.0.3-1
  - Remove our Debian 11 template, as upstream's one is not marked experimental anymore
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 2.0.3-1
  - - CP-43952: Remove 32-bit Windows 10
  - * Fri May 05 2023 Xihuan Yang <xihuan.yang@citrix.com> - 2.0.2-1
  - - CP-41630: Support up to 64 vCPUs for HVM guests
  - * Thu Feb 16 2023 Minghui Hu <minghui.hu@citrix.com> - 2.0.1-1
  - - CP-41650: Remove CoreOS templates from Next
  - * Tue Feb 14 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-2
  - - CP-42132: Install Windows 11 template by default


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - Update to 2.0.6-1
  - Remove our Debian 12, RHEL 9, Rocky Linux 9, and Centos Stream 9 templates, now provided upstream
  - *** Upstream changelog ***
  - * Thu Oct 19 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.6-1
  - - CP-44378: Remove 'preview' From Ubuntu 22.04 Guest template
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.5-1
  - - CP-44127: Add New Guest templates Rocky Linux 9, CentOS Stream 9 and Debian 12
  - * Fri Sep 8 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.4-1
  - - CP-44042: Add Red Hat Enterprise Linux 9 (preview) template
  - * Wed Sep 6 2023 Lin Liu<Lin.Liu01@cloud.com> - 2.0.3-2
  - - BuildRequires python-setuptools to support xs9


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.9-1.1
changelog:
  - Sync with 2.0.9-1
  - *** Upstream changelog ***
  - * Tue Feb 13 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.9-1
  - - CP-46356 Remove 'preview' from Windows 11 template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.10-1.1
changelog:
  - Sync with 2.0.10-1
  - *** Upstream changelog ***
  - * Mon Mar 25 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.10-1
  - - CP-47662 Remove deprecated guest templates SUSE Linux 12 SP4 and Ubuntu 18.04
  - - CP-48082 Update Guest Templates to support UEFI Secure boot


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.13-1.1
changelog:
  - Rebase on 2.0.13-1
  - *** Upstream changelog ***
    * Tue Nov 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.13-1
    - CP-50305: Remove '(preview') from Windows Server 2025 template
    * Thu Sep 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.12-1
    - CP-50304 Add Windows Server 2025 preview template
    * Tue Sep 03 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.11-1
    - CP-47949 Add New Guest template Ubuntu 24.04
    - CP-47949 Remove 'preview' label from RHEL9, Rocky9, CentOS Stream 9 and Debian 12


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.14-1.1
changelog:
  - Rebase on 2.0.14-1
  - Add templates for almalinux 10, rocky linux 10, debian 13, oracle linux 10, redhat 10
  - *** Upstream changelog ***
    * Tue Jan 21 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.14-1
    - CP-51980: Add CentOS Stream 10 template
    - CP-51980: Remove 'preview' label from Ubuntu24.04


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20240717-1
changelog:
  - Update to IPU 2024.3 release
  - As the archive from XS is missing an update for 06-a5-03 due to Intel
    initially forgetting to release its update, we manually package this file.


author: David Morel <david.morel@vates.tech> - 20250127-1
changelog:
  - Update to publicly released microcode-20250211
  - Security updates for:
      - INTEL-SA-01166
      - INTEL-SA-01213
      - INTEL-SA-01139
      - INTEL-SA-01228
  - Updates for multiple functional issues
  - Upstream update drops files for older Sapphire Rapids steppings, we kept the previous versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250501-1
changelog:
  - Update to publicly released microcode-20250512
  - Security updates for:
      - INTEL-SA-01153
      - INTEL-SA-01244
      - INTEL-SA-01247
      - INTEL-SA-01322
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250715-1
changelog:
  - Update to publicly released microcode-20250812
  - Security updates for:
      - INTEL-SA-01249
      - INTEL-SA-01308
      - INTEL-SA-01310
      - INTEL-SA-01311
      - INTEL-SA-01367
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.34.1
changelog:
  - Sync with 4.19.19-8.0.34
  - *** Upstream changelog ***
  - * Thu Feb 29 2024 Chunjie Zhu <chunjie.zhu@cloud.com> - 4.19.19-8.0.34
  - - CA-387199: Fix for XSI-1566


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.36.1
changelog:
  - Sync with 4.19.19-8.0.36
  - *** Upstream changelog ***
  - * Mon Jul 15 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.36
  - - New tag due to a wrong build for 4.19.19-8.0.35
  - * Wed Jul 10 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.35
  - - CA-394994  backport fix agaw for a supported 48 bit guest address width
  - - Make sure the kernel configuration is up to date
  - - CP-40289: kernel-devel: Add a BPF Type Format (BTF) info file for libbpf
  - - CP-48280: Disable Intel Powerclamp driver


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.38.1
changelog:
  - Sync with 4.19.19-8.0.38
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.38
    - CA-401809: DLM failure leaves system unstable fixes
    - CP-49678: Reduce Xen timer tick


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.42.1
changelog:
  - Sync with 4.19.19-8.0.42
  - *** Upstream changelog ***
    * Mon Apr 07 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.42
    - XSI-1728: Avoid repeatedly emitting uevents for LUN changes on CHECK_CONDITION
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.41
    - CP-51825: Add 50G/100G/200G ethtool link modes
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.40
    - None
    * Thu Jan 09 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.39
    - CA-401809: Resolve incorrect coverity warning
    - CA-404447: Improve logging for xhci failures


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.43.1
changelog:
  - Sync with 4.19.19-8.0.43
  - *** Upstream changelog ***
   * Fri Jul 18 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.43
   - CA-412882: Register NVMe ns_id attribute(s) as default sysfs groups
   - CA-360450: Fix deadlock on PCI passthrough


author: Thierry Escande <thierry.escande@vates.tech> - 5.9_0.5.5.0-3.1
changelog:
  - Sync with 5.9_0.5.5.0-3
  - *** Upstream changelog ***
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 5.9_0.5.5.0-3
    - CP-51825: Enable 50G/100G/200G ethtool link modes for XS8 kernel


author: Mark Syms <mark.syms@cloud.com> - 1.1.3-1
changelog:
  - CP-53439 Get exception messages correctly for Python3
  - CA-395560 Improve logging and error checking on sg_readcap
  - CP-53783: use os.path.realpath instead of incorrect internal


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-2
changelog:
  - CP-39549: Configure defaults for swtpm_localca
  - CA-363859: Make compatible with GnuTLS 3.3
  - Fix debuginfo generation


author: Edwin Török <edwin.torok@cloud.com> - 0.7.3-3
changelog:
  - CA-371900: Capture output from swtpm during setup
  - Replace patch with upstream backports
  - CP-43409: update TPM manufacturer
  - CP-42059: Use simpler HTTP based REST API


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-8
changelog:
  - Add gnutls-compat.patch back to make compatible with xs8/xs9
  - CA-377995: Fix static analysis warnings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-1.1
changelog:
  - Update from XS 8.3 prerelease updates
  - *** Upstream changelog ***
  - * Wed Aug 17 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.1.0-1
  - - varstore-sb-state: only load auth data if needed
  - - xapidb_init: Use BACKEND_INIT_FAILURE
  - - CA-366706: Fix signal handling and possible segfault
  - - CP-39854: Implement Platform Attack Reset Mitigation spec
  - - CP-39864 / CP-40029: Implement PPI support
  - * Tue Jul 26 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.0.0-3
  - - Fix license of tools subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.1
changelog:
  - Update to 1.2.0-1
  - Remove varstored-1.0.0-change-certs-directory.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.2.0-1
  - - CP-41616: Move varstored auth dir to /var/lib/varstored
  - - CA-369046: Log the error code if set_variable_from_auth fails
  - - CA-362923: Change output format of create-auth
  - - CP-40832: Add standard UEFI Secure Boot certificates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.2
changelog:
  - Revert part of XCP-ng specific changes, as upstream varstored now uses /var/lib/varstored
    and certs should be available by default now.
  - Add varstored-1.2.0-fix-return-code-for-varstore-sb-state-user.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.3
changelog:
  - Update secureboot-certs script for recent UEFI cert handling in XAPI
  - Remove KEK and db cert databases for now, pending legal advice.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-2.1
changelog:
  - Sync with 1.2.0-2
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 1.2.0-2
  - - Rebuild against libxenstore.so.4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.2
changelog:
  - Auth: Add support to make KEK and DB files optional
  - Auth: Enable AUTH_ONLY_PK_REQUIRED build macro


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.3
changelog:
  - Remove generation and installation of KEK and db files
  - Add helper script to remove pem file from source archive
  - Update source archive with pem files removed


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.2.0-2.4
changelog:
  - Add gen-sbvar.py
  - Add self-signed PK.auth blob
  - Generate {KEK,db,dbx}.auth using gen-sbvar.py
  - Update secureboot-certs to take builtin KEK/db/dbx
  - Update Secure Boot certs from microsoft/secureboot_objects@3f69ef4


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-10.1
changelog:
  - Sync with 4.17.5-10
  - Remove xsa467.patch now provided by XS package
  - *** Upstream changelog ***
    * Thu Feb 27 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-10
    - Fix for XSA-467 CVE-2025-1713
    - Fix reboot/shutdown issues on AMD due to local APIC ESR interrupts


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-13.1
changelog:
  - Sync with 4.17.5-13
  - Remove xen-4.17.5-x86-intel-Fix-PERF_GLOBAL-fixup-when-virtualised.patch included in XS
  - *** Upstream changelog ***
    * Thu May  8 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-13
    - Fix for XSA-469 CVE-2024-28956
    * Mon Apr 28 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-12
    - Work around Ice Lake erratum ICX143, which manifests as a hang on boot
    - Fix crash on boot when perf counters are unavailable
    * Wed Mar 26 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-11
    - Add xenguest support for the platform:mmio_hole_size attribute
    - Identify which domain watchdog fired


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-14.1
changelog:
  - Sync with 4.17.5-14
  - Remove xsa470-4.17.patch included in XS release
  - *** Upstream changelog ***
    * Fri Jun 13 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-14
    - Fix for XSA-470 CVE-2025-27465
    - Fix booting on servers with RAM above the 16T boundary
    - Fix possible watchdog timeout caused by unnecessary cache flushing


author: Teddy Astie <teddy.astie@vates.tech> - 4.17.5-15.1
changelog:
  - Sync with 4.17.5-15
  - *** Upstream changelog ***
    * Fri Jul  4 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-15
    - Fix for XSA-471 CVE-2024-36350 CVE-2024-36357
    - Perform provenance checks on AMD microcode blobs


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 4.17.5-15.2
changelog:
  - Backport 22650d605462 "x86/hvmloader: select xen platform pci MMIO BAR UC or WB MTRR
    cache attributes"
  - Backport fd06f8700769 "tools/golang: update auto-generated libxl based types"


author: Yann Sionneau <yann.sionneau@vates.tech> - 4.17.5-18.1
changelog:
  - Sync with 4.17.5-18
  - Drop 0001-x86-hvmloader-select-xen-platform-pci-MMIO-BAR-UC-or.patch, applied upstream
  - *** Upstream changelog ***
    * Tue Aug  5 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-18
    - Domain runstate extentions for more RRDs
    - Mwait-idle updates for Intel Alder Lake thru Granite Rapids platforms

    * Wed Jul 23 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-17
    - Fix bad interaction of cache attribute relax with vGPU

    * Tue Jul 22 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-16
    - Relax cache attributes for Xen Platform PCI device BAR
    - Optimize flushing of Intel PML buffer


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.5-20.1
changelog:
  - Sync with 4.17.5-20
  - Use xsa472-[123].patch provided by XenServer
  - *** Upstream changelog ***
    * Mon Sep 01 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-20
    - Fix for XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143

    * Thu Aug 28 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-19
    - Add support for 4 or more socket Intel Granite Rapids systems
    - Fix usage of PCI devices on segments other than 0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 25.0.0-1.1
changelog:
  - Update to 25.0.0-1
  - *** Upstream changelog ***
    * Fri Jan 10 2025 Rob Hoes <rob.hoes@citrix.com> - 25.0.0-1
    - CA-403139: Set scheduler policy and priority thread
    - CA-403683: Configurable syslog printing


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 25.1.0-1.1
changelog:
  - Update to 25.1.0-1
  - Sync patches and robustify access to NBD paths using O_SYNC
  - *** Upstream changelog ***
    * Thu Mar 06 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 25.1.0-1
    - CA-407106: Fix various static analyzer warnings
    - CA-404658: Separate heartbeat send and receive threads
    - CA-407313: Replace HA spinlock with rwlock
    - CA-407256: Call to xha-lc is a no-op
    - CA-406953: Fix pointer truncation in hypercall arguments and undefined behaviour
    * Thu Jan 30 2025 Alex Brett <alex.brett@cloud.com> - 25.0.1-1
    - CA-405454: Fix xha when using cgroup v2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.72.0-1.1
changelog:
  - Update to 6.72.0-1
  - Rediff xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch
  - *** Upstream changelog ***
    * Fri Jul 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.72.0-1
    - upstream: patch rpclib to support python3, and start using it
    - upstream: patch uri packages to parse ipv6 addresses correctly
    - maintenance: Fix issues spotted by the opam linter

    * Mon Jul 17 2023 Edwin Török <edwin.torok@cloud.com> - 6.71.0-2
    - Bump release and rebuild

    * Tue Jul 11 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.71.0-1
    - xs: update xapi-rrd to 1.9.2 (memory leak fix)
    - xs: add goblint for static analysis of C stubs

    * Mon Jul 10 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-2
    - Remove build dependencies, they are opam's normal dependencies

    * Wed Jun 07 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-1
    - xs: update xapi-stdext packages
    - upstream: remove unused dependencies, do not depend on xen
    - xs-extra: update metadata from upstream
    - vhd-format: move from upstream to xs-extra

    * Tue Jun 06 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-2
    - Bump release and rebuild

    * Fri May 05 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-1
    - ocaml: Use correct file contents in ocaml-system.4.14.1
    - upstream: Remove old ocamlformat and odoc-parser

    * Mon Apr 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.68.0-1
    - xs: do not package ezxenstore, it's a part of xen-api
    - ocaml: add 4.14

    * Wed Mar 22 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.67.0-1
    - xs: xenctrl.dummy: do not rsync Xen packages we do not use
    - Make xs-opam self-consistent and able to run unit tests
    - upstream: enforce only known licenses
    - upstream: update dune packages to 3.7.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.74.0-1.1
changelog:
  - Update to 6.74.0-1
  - Drop xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch, applied by XS
  - *** Upstream changelog ***
    * Thu Nov 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.74.0-1
    - xs: update xapi-stext packages to 4.23.0
    - licenses: update package licenses

    * Fri Oct 27 2023 Lin Liu <Lin.Liu01@cloud.com> - 6.73.0-2
    - Build with gcc for xs9

    * Wed Sep 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.73.0-1
    - xs: update polly and qmp
    - upstream: update many packages, there are no breaking changes


author: Benjamin Reis <benjamin.reis@vates.tech> - 6.77.0-1.1
changelog:
  - Rebase on 6.77.0-1
  - Drop xs-opam-repo-6.74.0-metajson.XCP-ng.patch
  - *** Upstream changelog ***
    * Wed Jan 31 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.77.0-1
    - Remove xapi-rd, xapi-inventory and xapi-stext-* packages

    * Wed Dec 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-2
    - Bump release

    * Tue Dec 19 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-1
    - upstream: update ocamlformat to the latest version
    - update inotify to 2.5.0 and uri to 4.4.0

    * Fri Nov 17 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.75.0-1
    - xs: update xapi-rrd to 1.11.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.78.0-1.1
changelog:
  - Rebase on 6.78.0-1
  - *** Upstream changelog ***
    * Thu Mar 07 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.78.0-1
    - Add patch for rpclib to accept empty variants
    - Non-breaking update of upstream dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.80.0-1.1
changelog:
  - Rebase on 6.80.0-1
  - *** Upstream changelog ***
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1

    * Mon May 13 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.79.0-1
    - ocaml: add 4.14.2 packages
    - upstream: update non-breaking packages


author: Yann Dirson <yann.dirson@vates.tech> - 6.86.0-1.1
changelog:
  - Update to 6.86.0-1
  - Refresh removal of dlm package (location changed in source tree)
  - Don't pass "-f" to "rm" while removing packages, to better catch upstream changes
  - Fix typo generating /etc/profile.d/opam.sh
  - Reformat changelog to allow diffing with upstream
  - *** Upstream changelog ***
    * Wed Oct 09 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.86.0-1
    - Include crowbar library
    
    * Tue Oct 08 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.85.0-1
    - Update Uuidm to 0.9.9
    - Use upstream folder structure, use opam-directed tools for managing it
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.84.0-1
    - CA-399172: fix potential crash in Uri.of_string
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.83.0-1
    - Patch Uri packages to add path_unencoded
    - jst-config: fix build on Fedora40
    - Metadata refresh, breaking update of upstream libraries
    - Remove systemd library
    
    * Tue Jul 02 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.81.0-1
    - Update crc to 2.2.0
    - Add qcheck and qcheck-alcotest
    
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.87.0-1.1
changelog:
  - Update to 6.87.0-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.87.0-1
    - Drop dependency on async and core packages
    - Non-breaking updates of packages


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 6.91.0-1.1
changelog:
  - Update to 6.91.0-1
  - *** Upstream changelog ***
    * Fri Jul 18 2025 Rob Hoes <rob.hoes@cloud.com> - 6.91.0-1
    - Add qcow-stream and its dependencies
    - packages: update xen-api's metadata

    * Tue Jun 10 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.90.0-1
    - packages: update dune packages to 3.18.2
    - packages: update ocaml-xenstore to 2.4.0
    - packages: update mirage-crypto to 2.0.1

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 6.89.0-2
    - Bump release and rebuild

    * Thu May 22 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.89.0-1
    - packages: round of non-breaking updates (dune, ssl, others)
    - packages: update xenstore_transport to 1.4.0

    * Fri Mar 28 2025 Rob Hoes <rob.hoes@cloud.com> - 6.88.0-1
    - New HTTP packages
    - Non-breaking updates of existing packages

    * Tue Jan 21 2025 Deli Zhang <deli.zhang@cloud.com> - 6.87.0-2
    - CP-52964: Build with OpenSSL3 for XS8


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-2.1
changelog:
  - Update to 10.1.14-2
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 10.1.14-2
  - - CP-43942: Remove Portable SR feature


author: Benjamin Reis <benjamin.reis@vates.tech> - 11.0.2-1.1
changelog:
  - Update to 11.0.2-1
  - Redo xsconsole-11.0.2-support-ipv6.XCP-ng.patch (now contains xsconsole-10.1.14-ipv6-autoconf.XCP-ng.patch)
  - Drop xsconsole-10.1.14-display-vlan.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Mar 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.2-1
  - - CA-369899: Add NTP config control for DHCP|Default|Manual|None options
  - - CA-389475: Update the timezone when it changes
  - * Thu Feb 29 2024 Mark Syms <mark.syms@citrix.com> - 11.0.1-1
  - - CA-389275: return insrtype if no translation
  - * Thu Feb 29 2024 Fei Su<fei.su@cloud.com> - 11.0.0-2
  - - CP-48192 Requires glibc-langpack-en to fix the locale.Error on xs9
  - * Mon Feb 05 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.0-1
  - - CP-44690: Upgrade to python 3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.6-1.1
changelog:
  - Sync with 11.0.6-1
  - *** Upstream changelog ***
  - * Fri Jun 07 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.6-1
  - - CA-388527: Fix 'timed out' when creating an ISCSI SR
  - * Thu May 16 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.3-1
  - - CA-357771: Remove obsolete strings: StorageLink(CVSM/cslg) leftovers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.8-1.1
changelog:
  - Sync with 11.0.8-1
  - *** Upstream changelog ***
    * Tue Jul 23 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.8-1
    - CA-390512: Improved xenapi error handling
    * Tue Jul 23 2024 Alex Brett <alex.brett@cloud.com> - 11.0.7-1
    - CP-49228: Reintroduce Portable SR feature


author: David Morel <david.morel@vates.tech> - 11.0.8-1.2
changelog:
  - Backport fix to sync network reset trigger file with current XAPI
  - Backport fix for IPv6 truncated in pool.conf on network reset


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 11.0.9.1-1.1
changelog:
  - Sync with 11.0.9.1-1
  - Drop xsconsole-11.0.8-sync-network-reset-trigger-file.patch
  - Drop xsconsole-11.0.8-do-not-truncate-ipv6-in-pool-config-on-reset.patch
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 11.0.9.1-1
    - CP-309227: Enable xsconsole to support control SSH and ssh-auto-mode
    * Thu Aug 1 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.9-1
    - CA-395025: Local command shell login failed on XS9


