# changelog

author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Yann Dirson <yann.dirson@vates.tech> - 7.1-2.1
changelog:
  - Build for XCP-ng 8.3
  - Removed "Recommends: cifs-utils-info" as not supported by el7 rpm
  - Changed BuildRequires to pull python36-docutils
  - Add build fix for older toolchain: 0001-Fix-build-with-pre-c99-compilers.patch


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.3.1
changelog:
  - Don't build vfs_glusterfs and thus don't buildrequire glusterfs
  - Remove the useless build dependency to epel-release
  - Add gcc to the BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.4.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Yann Dirson <yann.dirson@vates.tech> - 4.10.16-25.1
changelog:
  - Revert XS changes to prepare for merging new upstream, keeping changelog
    and kerberos config changes
  - By Lucas Ravagnier <lucas.ravagnier@vates.tech>:
    - Import samba-4.10.16-25.el7_9
    - Use a bcond to enable XCP-ng packaging tweaks while preserving upstream spec content.
    - *** Upstream changelog ***
      * Tue Jul 25 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-25
      - resolves: #2222250 - Fix netlogon capabilities level 2

      * Fri Jan 20 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-24
      - related: #2154364 - Add additional patches for CVE-2022-38023

      * Wed Dec 21 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-23
      - resolves: #2154364 - Fix CVE-2022-38023

      * Tue Aug 30 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-20
      - resolves: #2119058 - Fix possible segfault in winbind

      * Tue May 10 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-19
      - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                 mapping for uid/gid conflict

      * Tue Jan 25 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-18
      - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
      - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
      - resolves: #2046148 - Fix CVE-2021-44142


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.32.1
changelog:
  - Update to 4.19.19-8.0.32
  - *** Upstream changelog ***
  - * Wed Oct 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.32
  - - CA-384066: fix netback vifs queue length
  - - Declare setup and dependencies for building live patches
  - * Fri Sep 29 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.31
  - - CA-383077 / XSI-1502: Backport SUNRPC-Always-drop-the-XPRT_LOCK-on-XPRT_CLOSE_WAIT
  - - CA-383484: Backport fix for XSA-441
  - * Thu Sep 07 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.30
  - - CA-381221: Make NFS timeouts more consistent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.33.1
changelog:
  - Sync with 4.19.19-8.0.33
  - *** Upstream changelog ***
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-8.0.33
  - - CA-387401: Fix for XSA-448


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.34.1
changelog:
  - Sync with 4.19.19-8.0.34
  - *** Upstream changelog ***
  - * Thu Feb 29 2024 Chunjie Zhu <chunjie.zhu@cloud.com> - 4.19.19-8.0.34
  - - CA-387199: Fix for XSI-1566


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.36.1
changelog:
  - Sync with 4.19.19-8.0.36
  - *** Upstream changelog ***
  - * Mon Jul 15 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.36
  - - New tag due to a wrong build for 4.19.19-8.0.35
  - * Wed Jul 10 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.35
  - - CA-394994  backport fix agaw for a supported 48 bit guest address width
  - - Make sure the kernel configuration is up to date
  - - CP-40289: kernel-devel: Add a BPF Type Format (BTF) info file for libbpf
  - - CP-48280: Disable Intel Powerclamp driver


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.38.1
changelog:
  - Sync with 4.19.19-8.0.38
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.38
    - CA-401809: DLM failure leaves system unstable fixes
    - CP-49678: Reduce Xen timer tick


author: Yann Dirson <yann.dirson@vates.tech> - 6.4-4.20230114
changelog:
  - Restore Fedora changelog and versionning, while keeping other XS-ification
  - XS changelog:
    * Wed Apr 10 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-3
    - CA-391276: Revert previous changes due to regression
    * Wed Mar 13 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-2
    - CA-369899: Update to verion 20240309
    - CA-369899: Use MONOTONIC time instead of REALTIME
    * Tue Jul 11 2023 Tim Smith <tim.smith@citrix.com> - 6.4-1
    - First imported release


author: Yann Dirson <yann.dirson@vates.tech> - 6.4-5.20240309
changelog:
  - sync with XS 6.4-4
  - unlisted XS changes:
    - Upgrade upstream revision to 20240309
    - Build and run a test program to verify there are no conflicts in lib versions
  - XS changelog:
    * Wed Aug 14 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-4
    - CP-48941: Update ncurses to MONOTONIC


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.4p1-23.3.1 + 0.10.3-2.23.3.1
changelog:
  - Sync with 7.4p1-23.3 + 0.10.3-2.23.3
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Roger Pau Monné <roger.pau@citrix.com> - 4.17.4-8
changelog:
  - Fix for XSA-460 CVE-2024-31145
  - Fix IO breakpoint recognition in PV guests
  - Fix libxenstore.so to not modify SIGBUS behind the back of the application
  - Fix a integer overflow in Xen's bunzip2(), leading to a rare decompression
    faliure


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-2
changelog:
  - Fix x2APIC cluster handling across S3
  - Avoid clobbering firmware memory during the load-base calculation
  - Fix ASAN issues identified in `xentop` and `xl dmesg`


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-4
changelog:
  - Fixes for
    - XSA-463 CVE-2024-45818
    - XSA-464 CVE-2024-45819
  - Fix IO-APIC directed EOIs when using AMD-Vi interrupt remapping
  - Fix a crash during livepatch loading caused by an incorrect order of checks
  - Switch xAPIC flat driver to use physical destination mode for external
    interrupts
  - Remove an overly strict check when parsing AMD IVRS ACPI tables
  - Fix a leak of pending interrupts during CPU offline


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-6.1
changelog:
  - Sync with 4.17.5-6
  - *** Upstream changelog ***
    * Tue Dec  3 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-6
    - Fix migration of VMs from CH 8.2 CU1 to XS8 when the guest is using BHI_DIS_S
    * Mon Nov 25 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-5
    - Initial AMD Turin support
    - Fix dom0 pIRQ limit calculation
    - Fix emulation of BMI1/2 instructions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-9.1
changelog:
  - Sync with 4.17.5-9
  - *** Upstream changelog ***
    * Fri Feb 07 2025 Javi Merino <javi.merino@cloud.com> - 4.17.5-9
    - Fix PCI config reads patch
    * Tue Feb  4 2025 Javi Merino <javi.merino@cloud.com> - 4.17.5-8
    - Fix IO_PAGE_FAULT reported by AMD
    - Reduce PCI config reads
    * Wed Dec 18 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-7
    - Fix IO-APIC initialization with ExtINT mode pins
    - Fix emulation of MOVBE instruction
    - Fix Ocaml rpath setting


