# changelog

author: Yann Dirson <yann.dirson@vates.fr> - 10.10.11.xcpng.3-1
changelog:
  - Update to v10.10.11.xcpng.3, bringing:
    - Fix regression preserving multipath configuration on upgrade


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.10.11.xcpng.3-2
changelog:
  - Loosely rebase on XS's 10.10.11-1 SRPM: only apply relevant packaging changes.
  - Sources unchanged: we keep our tarball.
  - Upstream packaging change included from XenServer's SRPM:
    - Handling of feature flags


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.16.xcpng.1-1
changelog:
  - Loosely rebase packaging on XS's 10.10.16-1, bringing:
    - declaring support for 4KN-capable SR
    - run tests on package build
  - Update to v10.10.16.xcpng.1 release, bringing:
    - deprecate legacy BIOS boot
    - support for upgrading from old MBR to new GPT layout
    - allow 4KN-capable SR type to be used


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.16.xcpng.2-1
changelog:
  - Update to v10.10.16.xcpng.2 release, bringing:
    - Make the unsupported / for-troubleshooting status of kernel-alt more obvious


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.10.6.xcpng.2-2
changelog:
  - Remove 0001-Prevent-upgrading-from-platform-3.4.0.patch
    - Makes upgrading from 8.3 or XenServer 8 possible again


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.1-1
changelog:
  - Update to v10.10.19.xcpng.1 release, bringing:
    - #151: Fix UEFI Restore
    - CA-392758: Remove Firmware Boot Selected flag check
    - CP-49195: Allows to preserve first partition from MBR layout
    - CP-49641: Ignore errors mounting/unmounting explicit mount points
    - CA-392935: Release device if partition does not need to be resized
    - CA-392916: Create directory for mount= option
    - Better support for SDX upgrade
    - CA-391659: Set correct partition type restoring XS 7.1
    - CP-47625: Replace mkinitrd with dracut command
    - CA-391027: Mount devices specified by mount= only when needed
    - CA-389160: Filter secrets when logging results/answers during failures


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.2-1
changelog:
  - Update to v10.10.19.xcpng.2 release, bringing:
    - Fix installation of kernel-alt package when in kernel-alt mode


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.3-1
changelog:
  - Update to v10.10.19.xcpng.3 release, bringing:
    - fix usage of driver disks such as intel-igb
    - fix abusive logging at "critical" level


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.4-1
changelog:
  - Update to v10.10.19.xcpng.4 release, bringing:
    - Preserve stunnel certs
    - Mark 'Dual Stack' as experimental
    - Boot mode checks
    - Misc debugging improvements


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.1.0-1
changelog:
  - HTTP server can reuse binding address now
  - Notify when HTTP server is ready
  - Better error handling and command logs
  - SIGTERM can be safely sent to NBD server


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.13.1
changelog:
  - Rebase on latest package from CH 8.3 Preview
  - Re-add changes to produce openvswitch-ipsec subpackage


author: David Morel <david.morel@vates.fr> - 2.5.3-2.3.13.2
changelog:
  - Backport fix for CVE-2023-1668: Remote traffic denial of service via crafted packets with IP proto 0
  - Comment out tests that fail
  - Enable make check in spec file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.14.1
changelog:
  - Update to 2.5.3-2.3.14
  - Drop openvswitch-2.5.3-CVE-2023-1668.backport.patch, now patched in XenServer's RPM
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.14
  - - CA-376367: Fix CVE-2023-1668


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-1.1
changelog:
  - Update to 2.17.7-1
  - Add openvswitch-2.17.7-comment-failing-tests.XCP-ng.patch (Benjamin Reis)
  - Add openvswitch-2.17.7-add-pythonpath-ipsec.XCP-ng.patch (Benjamin Reis)
  - Get ipsec script and service from new sources (Benjamin Reis)
  - *** Upstream changelog ***
  - * Wed Aug 23 2023 Chunjie Zhu <chunjie.zhu@cloud.com> - 2.17.7-1
  - - CP-44181: upgrade to OVS LTS 2.17.7


author: David Morel <david.morel@vates.tech> - 2.17.7-1.2
changelog:
  - Apply fix for CVE-2023-3966, provided in advisory
  - Apply fix for CVE-2023-5366, provided in advisory


author: David Morel <david.morel@vates.tech> - 2.17.7-1.3
changelog:
  - Link with xs-openssl instead of openssl
  - Tweak ovs-ctl script that is used to start ovsdb-server, passing it
    --ssl-ciphers and --ssl-protocols command line parameters to disable weak
    ciphers.


author: David Morel <david.morel@vates.tech> - 2.17.7-1.5
changelog:
  - link back to openssl to avoid issues with XO sdn-controller
  - use ciphers that works with XO sdn-controller and should not be considered as weak-ciphers


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-18
changelog:
  - Loosely sync with xenserver-release-8.3.60-10
  - *** Upstream changelog ***
  - * Thu Dec 14 2023 Alex Brett <alex.brett@cloud.com> - 8.3.60-10
  - - Revert of fcoe changes in 8.3.60-8 pending further testing
  - * Wed Dec 13 2023 Alex Brett <alex.brett@cloud.com> - 8.3.60-9
  - - CA-386077: Fixup filter and map diff between python2&3
  - - CA-386658: Fix line wrapping of motd following rebranding
  - - CP-46994: Install motd as /etc/motd
  - * Mon Nov 27 2023 Lin Liu <lin.liu@cloud.com> - 8.3.60-8
  - - CA-385236: Re-direct critical logs to /dev/hvc0
  - - CP-46168: Some py2->py3 update and requires python3-xcp-libs
  - * Thu Oct 26 2023 Lin Liu <lin.liu@cloud.com> - 8.3.60-6
  - - CP-45918: XS9 does not build python2 site-packages
  - * Wed Oct 25 2023 Alex Brett <alex.brett@cloud.com> - 8.3.60-5
  - - CP-45884: Minor tweaks to /etc/issue text
  - * Tue Oct 03 2023 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.3.60-4
  - - CP-41302: Python 2&3 compatible versions of branding.py


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-19
changelog:
  - Loosely sync with xenserver-release-8.4.0-3
  - *** Upstream changelog ***
  - * Mon Feb 26 2024 Gerald Elder-Vass <Gerald.Elder-Vass@cloud.com> - 8.4.0-3
  - - CP-47543: Increase pid max
  - * Tue Jan 30 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-2
  - - CP-44429: Move snmpd.xs.conf to net-snmp.spec
  - - CP-44429: iptable: Accept snmp port 161
  - * Tue Jan 09 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-1
  - - CP-44059: Update Product & Platform versions ahead of XenServer 8 GA
  - * Fri Jan 05 2024 Lin Liu <lin.liu@cloud.com> - 8.3.60-12
  - - In XS9, sshd manages the config itself, so remove config update from xenserver-release
  - * Wed Jan 03 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.3.60-11
  - - CP-37929: Remove legacy logrotate mechanism
  - - CA-385315: print both SHA1 and SHA256 fingerprints


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-23
changelog:
  - Loosely sync with xenserver-release-8.4.0-5
  - *** Upstream changelog ***
  - * Mon Apr 08 2024 Stephen Cheng <stephen.cheng@cloud.com> - 8.4.0-5
  - - CP-47599: Update set-printk-console to Python3
  - * Thu Mar 07 2024 Alex Brett <alex.brett@cloud.com> - 8.4.0-4
  - - CA-389583: Update curlrc cipher specification to openssl format


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-24
changelog:
  - Loosely sync with xenserver-release-8.4.0-10
  - *** Upstream changelog ***
  - * Wed May 22 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-10
  - - CA-392433: Start dhclient on iSCSI BFS interfaces
  - * Thu May 16 2024 Bernhard Kaindl <bernhard.kaindl@cloud.com> - 8.4.0-9
  - - CA-392412: Disable the bpf syscall for unprivileged tasks (not used)
  - * Sat May 11 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-8
  - - CP-46084: Revert and move gnu-free-sans-fonts obsoletion to xs-obsolete-packages
  - * Fri May 10 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-7
  - - CP-46084: Obsolete unused package gnu-free-sans-fonts
  - * Tue May 07 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-6
  - - CP-49083: Do not patch logrotate configuration


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-26
changelog:
  - Don't require the empty kernel-livepatch and xen-livepatch packages
  - Ensure rsyslog and systemd are installed in xcp-ng-release-config's %post


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.0-1
changelog:
  - Fix lock in updater plugin (See: https://github.com/xcp-ng/xcp/issues/523)
  - Normalize plugins output
  - Add plugin to display return of lsblk


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.2-1
changelog:
  - Really disable unwanted repos when running yum update
  - Fix exception handling when a command fails


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.3-1
changelog:
  - Add LVM plugin to list and create PVs, VGs and LVs
  - RAID plugin: handle gracefully when no RAID is present


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


