# changelog

author: Andrei Semenov <andrei.semenov@vates.fr> - 4.13.5-10.42.1
changelog:
  - From XenServer: Cope booting in x2APIC mode on AMD systems without XT mode
  - From XenServer: Remove sequential microcode application support. Only parallel application


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-10.42.2
changelog:
  - Synced patch xsa-433 from XS82ECU1041
  - - *** Upstream changelog ***
  - - * Sat Jul 22 2023 Andrew Cooper <andrew.cooper3@citrix.com>
  - - Fix for XSA-433 CVE-2023-20593.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-10.42.3
changelog:
  - Synced patch for XSA-433 from hotfix XS82ECU1044 
  - *** Upstream changelog ***
  - * Tue Aug 1 2023 Andrew Cooper <andrew.cooper3@citrix.com>
  - - Fix bug in XSA-433 fix, which accidentally disabled a hardware e


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.43
changelog:
  - Remove the NR_IOMMUs compile time limit.  This is necessary to boot on
    4-socket Sapphire Rapids systems.
  - Cope booting in x2APIC mode on AMD systems without XT mode.
  - Allow creating domains with grant settings larger than dom0.
  - Remove sequential microcode application support.  Only parallel application
    is supported by the HW vendors.
  - Introduce an elfnote for Dom0 <-> Xen negotiation of the activation of
    PV-IOMMU.
  - Increase the size of the serial transmit buffer.
  - Backport python3 shebang fixes.  Drop obsolete scripts.
  - Remove the xen-installer-files subpackage.  It was a vestigial remnant of an
    old build system.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.45
changelog:
  - Ignore VCPU_SSHOTTMR_future entirely.  The only known user of this is Linux
    prior to v4.7, and the usage is buggy.  This resolves guest crashes during
    migration.
  - Improve Xen's early boot checking of its own alignment.  In case of a
    bootloader error, this turns a crash with no diagnostics into a clear error
    message.
  - Drop XENMEM_get_mfn_from_pfn technical debt, the use of which has been
    replaced by PV-IOMMU.
  - Minor specfile improvements; branding, and a bad changelog date.


author: Roger Pau Monné <roger.pau@citrix.com> - 4.13.5-10.46
changelog:
  - Fix AMD-Vi assert.
  - Remove broken not built code in pv-iommu.
  - Add test_x86_emulator to XenDom0Tests.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.48
changelog:
  - Fix for XSA-433 CVE-2023-20593.
  - Limit scheduler loadbalancing to once per millisecond.  This improves
    performance on large systems.
  - Mask IO-APIC pins before enabling LVTERR/ESR.  This fixes issues booting if
    firmware leaves the IO-APIC in a bad state.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.49
changelog:
  - Fix bug in XSA-433 fix, which accidentally disabled a hardware errata
    workaround.
  - Update IO-APIC IRTEs atomically.  Fixes a race condition which causes
    interrupts to be routed badly, often with "No irq handler for vector"
    errors.
  - Expose MSR_ARCH_CAPS to guests on all Intel hardware by default.  On Cascade
    Lake and later hardware, guests now see the bits stating hardware immunity
    to various speculative vulnerabilities.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.51
changelog:
  - Further fix for XSA-433.  Extend the chicken-bit workaround to all CPUs
    which appear to be a Zen2 microarchtiecture, even those not on the published
    model list.
  - Fix for AMD errata #1474.  Disable C6 after 1000 days of uptime on AMD Zen2
    systems to avoid a crash at ~1044 days.
  - Fix for MSR_ARCH_CAPS boot-time calculations for PV guests.
  - Remove the debug PV-shim hypervisor.  The release build is still present and
    operates as before.
  - Remove TBOOT and XENOPROF support in Xen.  Both are obsolete and the latter
    leaves benign-but-alarming messages in logs.
  - Remove the "pod" command line option.  This was intended as a further
    workaround for XSA-246, but wasn't effective owing to poor error handling
    elsewhere.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.52
changelog:
  - Fix for XSA-439 / CVE-2023-20588.
  - Ignore MADT entries with invalid APIC_IDs.
  - Fix the emulation of VPBLENDMW with a mask and memory operand.
  - Fix a incorrect diagnostic about spurious interrupts.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.53
changelog:
  - Fixes for
    - XSA-438 CVE-2023-34322
    - XSA-440 CVE-2023-34323
    - XSA-442 CVE-2023-34326
    - XSA-443 CVE-2023-34325
    - XSA-444 CVE-2023-34327 CVE-2023-34328
  - Pygrub extended to deprivilege itself before operating on guest disks.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.55
changelog:
  - Fix for AMD erratum #1485, which has been observed to cause #UD exception on
    AMD Zen4 systems.
  - Allow using the platform/ovmf-override key to configure the OVMF firwmare to
    use on a per-VM basis.
  - Further Python3 fixes.


author: Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.13.5-10.58
changelog:
  - Remove limit of 64 CPUs from hvmloader.
  - Fix pygrub incompatibility with python3.
  - Improve the livepatch infrastructure.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.59
changelog:
  - Enable AVX-512 by default for Intel IceLake and later CPUs.
  - Rebuild with updated Ocaml 4.14 runtime.
  - Fix possible memory leak in libxenguest cpu-policy infrastructure.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.60
changelog:
  - Fix watchdog setup on Intel Sapphire Rapids and Emerald Rapids platforms.
  - Adjust preemption during IOMMU setup to avoid triggering the watchdog.
  - Extend AMD #1474 (crash after ~1044 days) workaround to Zen1 platforms.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.3-1
changelog:
  - Update to Xen 4.17
    Major highlights:
      - CET-SS, CET-IBT and IOMMU Superpages used on capable hardware
      - PV32, PV_LINEAR_PT and SHADOW_PAGING now compiled out
      - NX and HAP (Intel EPT or AMD NPT) support in hardware is now mandatory


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.3-2
changelog:
  - De-virtualise more function pointers, based on boot time configuration
  - Improve the performance of IOMMU construction for dom0
  - Fix a bug with the determination of IVMD memory regions
  - Fix inefficiencies with XEN_{SYS,DOM}CTL_getdomaininfo{,list}
  - Fix undefined behaviour in compat_set_timer_op()
  - Fix the Raw CPU Policy rescan when CPUID Masking is active


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.3-3
changelog:
  - Fix for XSA-451 CVE-2023-46841.
  - Fix the migration of VMs which had previously seen the CMP_LEGACY feature.
  - Retire support to customise guest memory at the 1M boundary.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.3-4
changelog:
  - Fixes for:
    - XSA-452 CVE-2024-2193, off by default
    - XSA-453 CVE-2023-28746
  - Fix levelling of MD_CLEAR/FB_CLEAR across a pool
  - Hide x2APIC from PV guests by default
  - Fixes to livepatching, including the ability to patch .rodata
  - Improve oxenstored performance by avoiding Hashtbl.copy when processing
    packets
  - Print the SPECULATIVE_HARDEN_* options which are enabled at build time


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.3-4
changelog:
  - Fixes for:
    - XSA-453 CVE-2024-2193, off by default
    - XSA-452 CVE-2023-28746
  - Fix levelling of MD_CLEAR/FB_CLEAR across a pool
  - Hide x2APIC from PV guests by default
  - Fixes to livepatching, including the ability to patch .rodata
  - Improve oxenstored performance by avoiding Hashtbl.copy when processing
    packets
  - Print the SPECULATIVE_HARDEN_* options which are enabled at build time


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-1
changelog:
  - Update to Xen 4.17.4
  - Fix a bug in RTC emulation for HVM guests which occasionally causes OVMF to
    fail an assertion
  - Fix a bug in livepatch application when CET-IBT is active, leading to a full
    host crash
  - Include the debug xen debug symbols in in the lp-devel subpackage


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-3
changelog:
  - Pass all MSI-X vector control writes to the device model
  - Distinguish "ucode already up to date" and treat it as success
  - Optimise HVMLoader AP bringup
  - Fix xentop cpu% sort order
  - Fix possible watchdog timeouts or NULL pointer deference with CPU hotplug


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10-1
changelog:
  - Remove xenbuilder files
  - CA-323402: Avoid 900s delay during iSCSI boot when path is down
  - CA-323402: Don't wait for network interfaces to be setup


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.4-1
changelog:
  - CA-358870: Removed filename parameter and usage from func_output to fix error in the unclustered case
  - CA-358870: added exception to prevent file not found error in the unclusterd case


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.7-1
changelog:
  - CP-38441: Add bugtool support for vTPM
  - CA-369841: XSI-1298 xen-bugtool command takes over 1 hour to collect xenserver-databases


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.12-1
changelog:
  - CA-378768: capture block schedulers
  - Capture the contents of the cron dirs
  - CP-41107: Store bug tool log in status report
  - CP-43806: Collect `xen-cpuid -p`
  - Collect customised multipath configuration
  - Remove obsolete MPP from bugtool
  - CP-42688: Collect NRPE config files
  - XSI-1385: Collect plain text (human-readable) SAR file reports


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 1.3.13-1
changelog:
  - CP-45506: Also add testcase for the subarchive at etc/systemd.tar
  - CP-45506: Archive /etc/systemd as a tar archive inside the output


author: Andrew Cooper <andrew.cooper3@citrix.com> - 1.3.0-1
changelog:
  - Fix multiple pylint error/warnings
  - Drop collection of obsolete logfiles
  - Correct the build and runtime dependencies


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 2.0.3-1
changelog:
  - CA-389135: Fix saving RRDs using the hidden --entries=persistent-stats flag
  - CA-389176: Fix collecting the /var/log/xcp-rrdd-plugin logs when --all is used
  - CA-389177: Fix interactive yes/no question mode (if --yestoall is not passed)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-8
changelog:
  - revert loff_t to off64_t change to preserve xfs.h behavior (#1366291)
  - accomodate lack of ustat() on some arches (#1373605)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Christian Lindig <christian.lindig@citrix.com> - 10.1.0-1
changelog:
  - XSI-301: Print errno when watchdog hypercall fails.
  - XSI-301: remove duplicated unlock_pages lines
  - CA-315962 cleanupwatchdog: Use hypercall's errno
  - CA-315962 cleanupwatchdog: exit when encountering errors on hypercalls
  - CA-315962 cleanupwatchdog: restrict hypercalls to disable watchdogs
  - CA-315962 cleanupwatchdog: simplify hypercall call handling
  - CA-315962 cleanupwatchdog: Allow resetting watchdog slots without an HA file
  - CA-315962: Flush watchdog slots on HA startup


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Require xorg-x11-font-utils >= 7.2-11 for font-utils 1.1.0
  - Fix bashism in spec file (&>)
  - Remove perl hack for DEFAULT_FONTS_DIR, fixed upstream 
  - Remove perl and autoconf requirement.
  - Create %ghost files {misc|705dpi|...}/fonts.scale.
  - Drop fontdir alias patches
  - Update a few fonts (well, all of them)
      - encodings-1.0.3
      - font-adobe-100dpi-1.0.1
      - font-adobe-75dpi-1.0.1
      - font-adobe-utopia-100dpi-1.0.2
      - font-adobe-utopia-75dpi-1.0.2
      - font-adobe-utopia-type1-1.0.2
      - font-alias-1.0.2
      - font-arabic-misc-1.0.1
      - font-bh-100dpi-1.0.1
      - font-bh-75dpi-1.0.1
      - font-bh-lucidatypewriter-100dpi-1.0.1
      - font-bh-lucidatypewriter-75dpi-1.0.1
      - font-bitstream-100dpi-1.0.1
      - font-bitstream-75dpi-1.0.1
      - font-bitstream-type1-1.0.1
      - font-cronyx-cyrillic-1.0.1
      - font-cursor-misc-1.0.1
      - font-daewoo-misc-1.0.1
      - font-dec-misc-1.0.1
      - font-isas-misc-1.0.1
      - font-jis-misc-1.0.1
      - font-micro-misc-1.0.1
      - font-misc-cyrillic-1.0.1
      - font-misc-ethiopic-1.0.1
      - font-misc-misc-1.1.0
      - font-mutt-misc-1.0.1
      - font-schumacher-misc-1.1.0
      - font-screen-cyrillic-1.0.2
      - font-sony-misc-1.0.1
      - font-sun-misc-1.0.1
      - font-winitzki-cyrillic-1.0.1
      - font-xfree86-type1-1.0.2


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.54.0-1
changelog:
  - CP-34942: update lwt to 5.4.1
  - CP-34942: update pci to 1.0.4
  - CP-34643: Update xapi-stdext packages to 4.18.0
  - CP-34942: Update ppxlib to 0.22.1
  - xs-extra: add lwt to xapi-idl's dependencies
  - CP-36097 REQ-403 patch ocaml-conduit
  - maintenance: point to correct versions of conduit


author: Christian Lindig <christian.lindig@citrix.com> - 6.56.0-1
changelog:
  - CA-359981: Use correct SPDX identifiers
  - CI: add stockholm LCM badge
  - ci: detect unused packages
  - CI: update status badge
  - ci: use updated container images
  - conduit: allow turning TLS hostname verification off by setting..
  - CP-34942: Update dune to 2.9.0
  - CP-34942: Update dune to 2.9.1
  - CP-34942: Update ocamlfind to 1.9.1
  - CP-34942: update unix-errno
  - CP-37034: add tyre: library for typed regular expressions
  - CP-37368: merge xapi-idl into message-switch
  - CP-37369: merge squeezed into xenopsd
  - CP-37931: merge forkexecd into message-switch
  - CP-38206: transitional libs are in the xapi's main repo
  - maintenance: fix depexts
  - maintenance: remove mentions of docker in the readme
  - maintenance: remove unused conf-m4
  - maintenance: remove unused upstream packages
  - maintenance: schedule builds for the yangtze branch
  - remove xapi-libs-transitional metapackage
  - specsavers: merge xapi-storage(-script) into message-switch
  - specsavers: merge xcp-networkd into xen-api
  - specsavers: merge xen-api-client into xen-api
  - specsavers: merge xenopsd into xen-api
  - specsavers move message-switch code to xen-api
  - specsavers: move remaining independent daemons to xen-api
  - specsavers move xen-api-sdk code to xen-api
  - specsavers: relocate vhd-tool
  - specsavers: remove tapctl
  - specsavers: rrdd-plugins -> xcp-rrdd
  - specsavers: xcp-rrdd -> xapi
  - upstream: update ctypes to 0.19.1
  - upstream: update python2-7 to 1.2
  - upstream: update unix-errno to 0.6.0
  - xs-extra: stop using archive/master/master.tar.gz
  - xs-extra: update metadata from xen-api repo
  - xs-extra: use -j parameter to run tests
  - xs: update dlm to 0.3.2
  - xs: update xapi-inventory to 1.2.2
  - Use the official cache as a mirror
  - repo: use local folder as well for cache


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.57.0-1
changelog:
  - update libraries to be compatible with OCaml 4.13:
  - upstream: update ocamlformat to 0.19.0
  - upstream: update vhd-format to 0.12.2
  - upstream: update JST libraries for ocaml 4.13.1
  - upstream: update ppx_tools to 6.4
  - upstream: update ppxlib to 0.22.2
  - upstream: upgrade ocaml-migrate-parsetree to 2.3.0


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.57.0-3
changelog:
  - CA-359981: Include licenses.txt with all the libraries' licenses
  - CA-359981: Populate license field with all the pertinent licenses


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.58.0-1
changelog:
  - xs: add ounit as dependency to dlm
  - update ocamlfind to 1.9.3
  - upstream: add memtrace 0.2.1.2
  - update logs-syslog to 0.2.2
  - upstream: update metadata for existing packages
  - update rresult to 0.7.0
  - update rpclib packages to 8.1.1
  - update re to 1.10.3
  - update ipaddr packages to 5.2.0
  - update buenzli's unicode packages to 14.0.0
  - update mtime to 1.3.0
  - update conf-libev to 4-12
  - update ocplib-endian to 1.2
  - update topkg to 1.0.4
  - update fmt to 0.9.0
  - update asn1-combinators to 0.2.6
  - update lwt-dllist to 1.0.1
  - update sha to 1.15.1
  - update domain-name to 0.3.1
  - update duration to 0.2.0
  - update uri packages to 4.2.0
  - update tyxml to 4.5.0
  - update lwt packages to 5.5.0
  - update ocaml-compiler-libs to v.0.12.4
  - update ocaml-version to 3.1.0
  - update magic-mime to 1.2.0
  - update cppo to 1.6.8
  - update eqaf to 0.8
  - update bigstringaf to 0.8.0
  - update integers to 0.5.1
  - update cstruct packages to 6.0.1
  - update menhir libraries to 20211128
  - Update qcheck packages to 0.18
  - update janestreet packages to their latest 0.14.x version
  - upstream: update alcotest to 1.5.0
  - CP-38617: expose xentoollog as a package and use it
  - CA-359981: Replace 'typeof OCaml system' with a recognized SPDX
  - ci: package and publish tarball to github on tag
  - maintenance: drop previous ocaml versions
  - CA-359981: Tweak licenses to avoid duplicates


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.59.0-1
changelog:
  - xs-extra: add merge-fmt 0.2
  - CP-39805: update utop to 2.9.2
  - CP-39805: update xapi-stdext packages to 4.19.0
  - CP-39805: update xapi-inventory to 1.2.3
  - CP-39805: update qmp to 0.19.0
  - CP-39805: update dlm to 0.3.3
  - CP-39805: update cmdliner to 1.1.1 and rpclib to 9.0.0
  - CP-39805: update odoc to 2.1.0
  - CP-39805: update ocaml-lsp-server to 1.10.3
  - xs-extra: sync metadata with xen-api
  - upstream-extra: update depext to latest version
  - CP-34028: refresh xs-extra metadata for uuid changes


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.60.0-1
changelog:
  - CA-371780: update xapi-rrd to 1.9.1
  - xs-extra: update xapi package metadata
  - xs-extra: add dependencies to new packages
  - xs-extra: update with the upstream metadata
  - tools: add xapi-log and xapi-open-uri to metadata generator
  - gitignore: ignore cache.log
  - xs-extra: xen-api packages don't need to set XAPI_VERSION anymore
  - CA-367236: update xapi-rrd to 1.9.0
  - CI: deactivate stockholm / 8.2.0 builds
  - xs-extra: xapi-xenopsd now uses zstd for compression


author: Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.65.0-1
changelog:
  - CP-40716, General update of dependencies:
  - upstream: update conduit packages to 6.1.0
  - upstream: update bisect_ppx to 2.8.1
  - upstream: update io-page packages to 3.0.0
  - upstream: update conduit packages to 5.1.1
  - upstream: update x509 to 0.16.0
  - upstream: update mirage-crypto packages to 0.10.7
  - upstream: update tar packages to 2.0.1
  - upstream: update mirage-clock packages to 4.2.0
  - upstream: update ctypes to 0.20.1
  - upstream: update mirage-time packages to 3.0.0
  - upstream: update xenstore to 2.2.0
  - upstream: update lwt packages to 5.6.1
  - upstream: update vhd-format packages to 0.12.3
  - upstream: update ezjsonm to 1.3.0
  - upstream: update eqaf to 0.9
  - upstream: update hex to 1.5.0
  - upstream: update ounit packages to 2.2.6
  - upstream-extra: update react to 1.2.2
  - upstream: update ipaddr packages to 5.3.1
  - upstream: update bigarray-compat to 1.1.0
  - upstream: update integers to 0.7.0
  - upstream: update ocaml-version to 3.5.0
  - upstream: update domain-name to 0.4.0
  - upstream-extra: update odoc to 2.1.1
  - upstream: update qcheck packages to 0.19.1
  - upstream: update ocamlbuild to 0.14.1
  - upstream: update bigstringaf to 0.9.0
  - upstream: update inotify to 2.4
  - upstream: update ocaml-migrate-parsetree to 2.4.0
  - upstream: update cppo to 1.6.9
  - upstream: update re to 1.10.4
  - upstream: update sha to 1.15.2
  - upstream: update Janestreet libraries to v0.15.x
  - upstream: update cohttp packages to 2.5.6
  - upstream: update fix to 20220121
  - upstream: update menhir libraries to 20220210
  - upstream: update alcotest packages to 1.6.0
  - upstream: update uutf to 1.0.3
  - upstream: update xmlm to 1.4.0
  - upstream: update uuidm to 0.9.8
  - upstream: update topkg to 1.0.5
  - upstream: update ptime to 1.0.0
  - upstream: update conf packages
  - upstream: update ssl to 0.5.13
  - upstream: update yojson to 2.0.0 and dependencies
  - upstream-extra: update utop to 2.10.0
  - upstream-extra: update merlin to 4.5
  - upstream: update to ppx_tools to 6.5
  - upstream: update dune to 3.4.1
  - upstream: update metadata from opam-repository


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.66.0-1.1
changelog:
  - Remove dlm, which is only required by proprietary xapi-clusterd
  - Drop the dlm-devel BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.72.0-1.1
changelog:
  - Update to 6.72.0-1
  - Rediff xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Jul 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.72.0-1
  - - upstream: patch rpclib to support python3, and start using it
  - - upstream: patch uri packages to parse ipv6 addresses correctly
  - - maintenance: Fix issues spotted by the opam linter
  - * Mon Jul 17 2023 Edwin Török <edwin.torok@cloud.com> - 6.71.0-2
  - - Bump release and rebuild
  - * Tue Jul 11 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.71.0-1
  - - xs: update xapi-rrd to 1.9.2 (memory leak fix)
  - - xs: add goblint for static analysis of C stubs
  - * Mon Jul 10 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-2
  - - Remove build dependencies, they are opam's normal dependencies
  - * Wed Jun 07 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-1
  - - xs: update xapi-stdext packages
  - - upstream: remove unused dependencies, do not depend on xen
  - - xs-extra: update metadata from upstream
  - - vhd-format: move from upstream to xs-extra
  - * Tue Jun 06 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-2
  - - Bump release and rebuild
  - * Fri May 05 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-1
  - - ocaml: Use correct file contents in ocaml-system.4.14.1
  - - upstream: Remove old ocamlformat and odoc-parser
  - * Mon Apr 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.68.0-1
  - - xs: do not package ezxenstore, it's a part of xen-api
  - - ocaml: add 4.14
  - * Wed Mar 22 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.67.0-1
  - - xs: xenctrl.dummy: do not rsync Xen packages we do not use
  - - Make xs-opam self-consistent and able to run unit tests
  - - upstream: enforce only known licenses
  - - upstream: update dune packages to 3.7.0
  - * Fri Jul 07 2023 Benjamin Reis <benjamin.reis@vates.fr> - 6.66.0-1.2
  - - Patch `ocaml-uri` for IPv6 URI parsing


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.74.0-1.1
changelog:
  - Update to 6.74.0-1
  - Drop xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch, applied by XS
  - *** Upstream changelog ***
  - * Thu Nov 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.74.0-1
  - - xs: update xapi-stext packages to 4.23.0
  - - licenses: update package licenses
  - * Fri Oct 27 2023 Lin Liu <Lin.Liu01@cloud.com> - 6.73.0-2
  - - Build with gcc for xs9
  - * Wed Sep 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.73.0-1
  - - xs: update polly and qmp
  - - upstream: update many packages, there are no breaking changes


author: Benjamin Reis <benjamin.reis@vates.tech> - 6.77.0-1.1
changelog:
  - Rebase on 6.77.0-1
  - Drop xs-opam-repo-6.74.0-metajson.XCP-ng.patch
  - *** Upstream changelog ***
  - * Wed Jan 31 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.77.0-1
  - - Remove xapi-rd, xapi-inventory and xapi-stext-* packages
  - * Wed Dec 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-2
  - - Bump release
  - * Tue Dec 19 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-1
  - - upstream: update ocamlformat to the latest version
  - - update inotify to 2.5.0 and uri to 4.4.0
  - * Fri Nov 17 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.75.0-1
  - - xs: update xapi-rrd to 1.11.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.78.0-1.1
changelog:
  - Rebase on 6.78.0-1
  - *** Upstream changelog ***
  - * Thu Mar 07 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.78.0-1
  - - Add patch for rpclib to accept empty variants
  - - Non-breaking update of upstream dependencies


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-5.1
changelog:
  - Manually sync with CentOS 8's 1.1.1k-5 as Citrix did not update for CH 8.2.1
  - Use the hobbled sources instead of the full sources, as RHEL/CentOS does
  - Rediff Citrix's patch use-linux-random-header.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-5.2
changelog:
  - Fix failing tests due to expired certificates in test data
  - Disable zlib to remove TLS compression support
  - Remove extraneous --system-ciphers-file configure option


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-6.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-6.
  - *** Upstream changelog ***
  - * Wed Mar 23 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
  - - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - - Resolves: rhbz#2067146


author: David Morel <david.morel@vates.fr> - 1:1.1.1k-9.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-9.
  - Remove update-expired-SCT-certificates patch as it is integrated upstream
  - *** Upstream changelog ***
  - * Wed Feb 08 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
  - - Fixed Timing Oracle in RSA Decryption
  -   Resolves: CVE-2022-4304
  - - Fixed Double free after calling PEM_read_bio_ex
  -   Resolves: CVE-2022-4450
  - - Fixed Use-after-free following BIO_new_NDEF
  -   Resolves: CVE-2023-0215
  - - Fixed X.400 address type confusion in X.509 GeneralName
  -   Resolves: CVE-2023-0286
  - * Thu Jul 21 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-8
  - - Fix no-ec build
  -   Resolves: rhbz#2071020
  - * Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
  - - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  -   Resolves: CVE-2022-2097
  - - Update expired certificates used in the testsuite
  -   Resolves: rhbz#2092462
  - - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  -   Resolves: rhbz#2090372
  - - Fix CVE-2022-2068: the c_rehash script allows command injection
  -   Resolves: rhbz#2098279


author: David Morel <david.morel@vates.tech> - 1:1.1.1k-12.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-12.
  - Do not package openssl.cnf at all for xs-openssl, the system-wide one will be
    the one packaged with openssl.
  - disable weak ciphers at compile time
  - *** Upstream changelog ***
  - * Thu Nov 30 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
  - - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
  -   (a proper fix for CVE-2020-25659)
  -   Resolves: RHEL-17696
  - * Wed Nov 15 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
  - - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
  -   excessively long X9.42 DH keys or parameters may be very slow
  -   Resolves: RHEL-16538
  - * Thu Oct 19 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
  - - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
  -   Resolves: RHEL-14245
  - - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
  -   Resolves: RHEL-14239


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-6.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-6.
  - *** Upstream changelog ***
  - * Wed Mar 23 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
  - - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - - Resolves: rhbz#2067144


author: Aaron Robson <aaron.robson@citrix.com> - 10.1.9-1
changelog:
  - CA-304344: Makefile warning due to missing file XSFeatureInstallLicence.py
  - CA-304345: Integrate xsconsole with Travis CI
  - 'make clean' and 'make test' implemented
  - include suitable .gitgnore


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.12-1
changelog:
  - Add version to tarball filename
  - CA-348699: Fix full version display if the build number is empty


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.13-1
changelog:
  - Switch upstream to GitHub
  - Display 'Ext' instead of 'Ext3' for `ext` SRs
  - CA-355872: Use XAPI to edit DNS entries within xsconsole
  - Display clearer error message when XAPI unreachable
  - rework is_master to raise in case of failure


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.13-1.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-remove incloudsphere subpackage
  - Keep xsconsole-10.1.9-rebrand-xsconsole-service.XCP-ng.patch
  - Keep xsconsole-10.1.9-define-xcp-ng-colors.XCP-ng.patch


author: Yann Dirson <yann.dirson@vates.fr> - 10.1.13-1.2
changelog:
  - Update colors to match new branding
  - Bump patchname to xsconsole-10.1.13-define-xcp-ng-colors.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-1.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Oct 04 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.14-1
  - - CP-40640: Show the textual rather than numeric product version


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-2.1
changelog:
  - Update to 10.1.14-2
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 10.1.14-2
  - - CP-43942: Remove Portable SR feature


author: Benjamin Reis <benjamin.reis@vates.tech> - 11.0.2-1.1
changelog:
  - Update to 11.0.2-1
  - Redo xsconsole-11.0.2-support-ipv6.XCP-ng.patch (now contains xsconsole-10.1.14-ipv6-autoconf.XCP-ng.patch)
  - Drop xsconsole-10.1.14-display-vlan.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Mar 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.2-1
  - - CA-369899: Add NTP config control for DHCP|Default|Manual|None options
  - - CA-389475: Update the timezone when it changes
  - * Thu Feb 29 2024 Mark Syms <mark.syms@citrix.com> - 11.0.1-1
  - - CA-389275: return insrtype if no translation
  - * Thu Feb 29 2024 Fei Su<fei.su@cloud.com> - 11.0.0-2
  - - CP-48192 Requires glibc-langpack-en to fix the locale.Error on xs9
  - * Mon Feb 05 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.0-1
  - - CP-44690: Upgrade to python 3


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-151
changelog:
  - Add repo-id to repomd timestamp error message.
  - Resolves: bug#1389816
  - Don't recommend makecache if just running.
  - Resolves: bug#1369389
  - Add logging of bad update notice duplicates.
  - Resolves: bug#1194915


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-153
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1399628
  - sqlitesack: fix filelist queries for duplicate pkgs.
  - Resolves: bug#1391507


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-154
changelog:
  - Add payload_gpgcheck option.
  - Resolves: bug#1343690
  - Add hint about rm -rf for yum clean all.
  - Resolves: bug#1357083
  - Have "yum check" ignore self conflicts.
  - Resolves: bug#1370134
  - Detect installed virtual provide in install().
  - Resolves: bug#1352585
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1397829


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-155
changelog:
  - Don't pollute stderr in FIPS mode.
  - Resolves: bug#1287610
  - Don't require enabled repos for URL installs.
  - Resolves: bug#1175315
  - installonlypkgs: add "installonlypkg(kernel)
  - Resolves: bug#1358492
  - Manpage fixes.
  - Resolves: bug#1386597
  - Resolves: bug#1411575


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-156
changelog:
  - Preload shared libs that we may dlopen().
  - Resolves: bug#1458841
  - Update payload_gpgcheck documentation.
  - Resolves: bug#1451817
  - Make exactarchlist support wildcards and add docs.
  - Resolves: bug#1361609
  - Add usercache config option.
  - Resolves: bug#1432319


author: CentOS Sources <bugs@centos.org> - 3.4.3-158.el7.centos
changelog:
  - CentOS yum config
  -  use the CentOS bug tracker url
  -  retain installonly limit of 5
  -  ensure distrover is always from centos-release
  - Make yum require yum-plugin-fastestmirror


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-37
changelog:
  - needs-restarting: add option for reboot hint.
  - Resolves: bug#1192946
  - needs-restarting: add option to list services.
  - Resolves: bug#1335587
  - reposync: add --download-metadata to the man page.
  - Resolves: bug#1329649
  - debuginfo-install: also respect provides when testing for installonly.
  - Related: bug#1293707


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-40
changelog:
  - needs-restarting: rework reboothint logic.
  - Related: bug#1192946
  - needs-restarting: rebase patch for 1335587.
  - Related: bug#1335587


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-41
changelog:
  - yum-config-manager: only select exact matches from --setopt.
  - Resolves: bug#1403015
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1406891


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-43
changelog:
  - yumdownloader: fix crash on broken srpm metadata.
  - Resolves: bug#1458098
  - package-cleanup: don't remove required dupes.
  - Resolves: bug#1455318
  - fastestmirror: move the logic before MD retrieval.
  - Resolves: bug#1428210
  - yum-debug-dump: improve repo failure handling.
  - Resolves: bug#1445751


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-44
changelog:
  - Add pre-transaction-actions plugin.
  - Resolves: bug#1470647
  - yum-builddep: add --define option.
  - Resolves: bug#1437636
  - verifytree: handle no @core group gracefully.
  - Resolves: bug#1349433
  - verifytree: fix handling of missing comps.
  - Resolves: bug#1333353


